Windows内核模块中的写文件操作

void writeFileInDriver() { UNICODE_STRING FName; OBJECT_ATTRIBUTES oa; IO_STATUS_BLOCK IoStatus; HANDLE fileHandle; char wBuffer[16]; memset(wBuffer,'6',16); RtlInitUnicodeString ( &FName, L"\\DosDevices\\C:\\lala.dat"); InitializeObjectAttributes ( &oa, &FName, // 文件路径 OBJ_CASE_INSENSITIVE | OBJ_KERNEL_HANDLE, NULL, // 如果第2个参数是绝对路径,则该参数应设置为NULL NULL // 设置NULL使用默认的安全描述符 ); ntStatus = ZwCreateFile ( &fileHandle, // 文件句柄 FILE_READ_DATA | FILE_WRITE_DATA | FILE_APPEND_DATA | SYNCHRONIZE, &oa, &IoStatus, NULL, FILE_ATTRIBUTE_NORMAL, FILE_SHARE_READ | FILE_SHARE_WRITE | FILE_SHARE_DELETE, FILE_OVERWRITE_IF, FILE_SYNCHRONOUS_IO_NONALERT, NULL, 0 ); ZwWriteFile(fileHandle,NULL,NULL,NULL,&IoStatus,wBuffer,12,NULL,NULL); ZwClose(&fileHandle); }