IRP_MJ_LOCK_CONTROL 0x11 IRP_MJ_CLEANUP 0x12 IRP_MJ_CREATE_MAILSLOT 0x13 IRP_MJ_QUERY_SECURITY 0x14 IRP_MJ_SET_SECURITY 0x15 IRP_MJ_POWER 0x16 IRP_MJ_SYSTEM_CONTROL 0x17 IRP_MJ_DEVICE_CHANGE 0x18 IRP_MJ_QUERY_QUOTA 0x19 IRP_MJ_SET_QUOTA 0x1A IRP_MJ_PNP IRP_MJ_MAXIMUM_FUNCTION...
IRP_MJ_DEVICE_CHANGE 0x18 IRP_MJ_QUERY_QUOTA 0x19 IRP_MJ_SET_QUOTA 0x1A IRP_MJ_PNP IRP_MJ_MAXIMUM_FUNCTION 0x1B 即插即用次要函数代码如下所示: 次要函数代码十六进制代码 IRP_MN_START_DEVICE 0x00 IRP_MN_QUERY_REMOVE_DEVICE 0x01
IRP_MJ_DEVICE_CHANGE 0x18 IRP_MJ_QUERY_QUOTA 0x19 IRP_MJ_SET_QUOTA 0x1A IRP_MJ_PNP IRP_MJ_MAXIMUM_FUNCTION 0x1B 即插即用次要函数代码如下所示: 次要函数代码十六进制代码 IRP_MN_START_DEVICE 0x00 IRP_MN_QUERY_REMOVE_DEVICE 0x01
pDriverObject->MajorFunction[IRP_MJ_SET_INFORMATION] = HelloDDKDispatchRoutine; pDriverObject->MajorFunction[IRP_MJ_DEVICE_CONTROL] = HelloDDKDispatchRoutine; pDriverObject->MajorFunction[IRP_MJ_SHUTDOWN] = HelloDDKDispatchRoutine; pDriverObject->MajorFunction[IRP_MJ_SYSTEM_CONTROL] = HelloDDKDispat...
#define IRP_MJ_DEVICE_CHANGE 0x18 #define IRP_MJ_QUERY_QUOTA 0x19 #define IRP_MJ_SET_QUOTA 0x1a #define IRP_MJ_PNP 0x1b 这些每一个都有特定的意思,比较常用的有: IRP_MJ_CREATE//创建和CreateFile对应 IRP_MJ_READ//读取和ReadFile对应 ...
#define IRP_MJ_POWER 0x16 #define IRP_MJ_SYSTEM_CONTROL 0x17 #define IRP_MJ_DEVICE_CHANGE 0x18 #define IRP_MJ_QUERY_QUOTA 0x19 #define IRP_MJ_SET_QUOTA 0x1a #define IRP_MJ_PNP 0x1b #define IRP_MJ_PNP_POWER 0x1b #define IRP_MJ_MAXIMUM_FUNCTION 0x1b ...
65"IRP_MJ_CLEANUP", 66"IRP_MJ_CREATE_MAILSLOT", 67"IRP_MJ_QUERY_SECURITY", 68"IRP_MJ_SET_SECURITY", 69"IRP_MJ_POWER", 70"IRP_MJ_SYSTEM_CONTROL", 71"IRP_MJ_DEVICE_CHANGE", 72"IRP_MJ_QUERY_QUOTA", 73"IRP_MJ_SET_QUOTA", ...
IRP_MJ_SET_VOLUME_INFORMATION 如果架構收到包含下列其中一個 I/O 函式代碼的 IRP,架構就不會處理 IRP。 如果您的驅動程式是篩選驅動程式,架構會將 IRP 傳遞至驅動程式堆疊中的下一個較低驅動程式。 如果您的驅動程式不是篩選驅動程式,架構會呼叫IoCompleteRequest,以STATUS_INVALID_DEVICE_REQUEST狀態值完成...
#define IRP_MJ_SET_VOLUME_INFORMATION 0x0b //设置卷信息 #define IRP_MJ_DIRECTORY_CONTROL 0x0c //目录控制 #define IRP_MJ_FILE_SYSTEM_CONTROL 0x0d //文件系统控制 #define IRP_MJ_DEVICE_CONTROL 0x0e //设备控制 #define IRP_MJ_INTERNAL_DEVICE_CONTROL 0x0f //内部设备控制 ...
发送主功能号为IRP_MJ_CLOSE的IRP向FSD表明: 文件对象引用计数已为0,由FSD负责销毁文件对象。 (1)文件关闭1:IRP_MJ_CLEANUP //自己发送IRP请求关闭文件的第1步(IRP_MJ_CLEANUP),表示文件对象句柄数为0NTSTATUS IrpCleanupFile(IN PDEVICE_OBJECT pDeviceObject,...