文件重命名的几种写法

现在主要的是通过往ZwSetInformationFile发送HANDLE和改名请求 
再者就是 往 IoSetInformation 发送FILEOBJECT和改名请求
以及我自己模仿iosetinformation写成的创建IRP改名

void
RenameFileROutineByHandle()
{
 UNICODE_STRING  UniFileString;
 OBJECT_ATTRIBUTES object;
 NTSTATUS   status;
 HANDLE    hFile;
 IO_STATUS_BLOCK  io_status = {0};
 PFILE_RENAME_INFORMATION RenamInfo = NULL;
 UNICODE_STRING  UniRenameStr;
 PFILE_OBJECT  fileObject;

 RtlInitUnicodeString(&UniFileString,L"\\Device\\HarddiskVolume2\\1.txt");
 
 InitializeObjectAttributes(
  &object,
  &UniFileString,
  OBJ_CASE_INSENSITIVE | OBJ_KERNEL_HANDLE,
  NULL,
  NULL);
 //打开文件,存在打开，不存在返回错误
 status = ZwCreateFile( &hFile,
  GENERIC_READ | GENERIC_WRITE,
  &object,
  &io_status,
  NULL,
  FILE_ATTRIBUTE_NORMAL,
  FILE_SHARE_READ,
  FILE_OPEN,
  FILE_NON_DIRECTORY_FILE |FILE_SYNCHRONOUS_IO_NONALERT,
  NULL,
  0);
 if(!NT_SUCCESS(status))
 {
  _asm int 3;
 }

 RenamInfo = (PFILE_RENAME_INFORMATION)ExAllocatePoolWithTag(NonPagedPool,1024,0);

 RenamInfo->ReplaceIfExists = FALSE;
 RenamInfo->RootDirectory = NULL;
 
 UniRenameStr.Buffer = RenamInfo->FileName;
 RenamInfo->FileNameLength = sizeof(ReNamePath) - sizeof(WCHAR);

 RtlCopyMemory(UniRenameStr.Buffer,ReNamePath,
  sizeof(ReNamePath));

 status = ZwSetInformationFile(hFile,&io_status,RenamInfo,1024,FileRenameInformation);
 if(!NT_SUCCESS(status))
 {
  _asm int 3;
 }

 ZwClose(hFile);
 return;
}

void
RenameFileROutineByObj()
{
 UNICODE_STRING  UniFileString;
 OBJECT_ATTRIBUTES object;
 NTSTATUS   status;
 HANDLE    hFile;
 IO_STATUS_BLOCK  io_status = {0};
 PFILE_RENAME_INFORMATION RenamInfo = NULL;
 UNICODE_STRING  UniRenameStr;
 PFILE_OBJECT  fileObject;

 RtlInitUnicodeString(&UniFileString,L"\\Device\\HarddiskVolume2\\1.txt");

 InitializeObjectAttributes(
  &object,
  &UniFileString,
  OBJ_CASE_INSENSITIVE | OBJ_KERNEL_HANDLE,
  NULL,
  NULL);
 //打开文件,存在打开，不存在返回错误
 status = ZwCreateFile( &hFile,
  GENERIC_READ | GENERIC_WRITE,
  &object,
  &io_status,
  NULL,
  FILE_ATTRIBUTE_NORMAL,
  FILE_SHARE_READ,
  FILE_OPEN,
  FILE_NON_DIRECTORY_FILE |FILE_SYNCHRONOUS_IO_NONALERT,
  NULL,
  0);
 if(!NT_SUCCESS(status))
 {
  _asm int 3;
 }

 RenamInfo = (PFILE_RENAME_INFORMATION)ExAllocatePoolWithTag(NonPagedPool,1024,0);

 RenamInfo->ReplaceIfExists = FALSE;
 RenamInfo->RootDirectory = NULL;

 UniRenameStr.Buffer = RenamInfo->FileName;
 RenamInfo->FileNameLength = sizeof(ReNamePath) - sizeof(WCHAR);

 RtlCopyMemory(UniRenameStr.Buffer,ReNamePath,
  sizeof(ReNamePath));

 ///////////////////////////////////////////////////////////
   status = ObReferenceObjectByHandle( hFile,
    0,
    *IoFileObjectType,
    KernelMode,
    &fileObject,
    NULL);
   if (!NT_SUCCESS(status))
   {
    _asm int 3;
   }
  
   status = IoSetInformation( fileObject,
    FileRenameInformation,
    1024,
    RenamInfo);
   if (!NT_SUCCESS(status))
   {
    _asm int 3;
   }
   
   ObDereferenceObject(fileObject);
 //////////////////////////////////////////////////////////

 ZwClose(hFile);
 return;
}

///////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
void
RenameFileROutineByIrp()
{
UNICODE_STRING  UniFileString;
 OBJECT_ATTRIBUTES object;
 NTSTATUS   status;
 HANDLE    hFile;
 IO_STATUS_BLOCK  io_status = {0};
 PFILE_RENAME_INFORMATION RenamInfo = NULL;
 UNICODE_STRING  UniRenameStr;
 PFILE_OBJECT  FileObject;
 PDEVICE_OBJECT   deviceObject = NULL;
 PIRP     irp = NULL;
 KEVENT     event;
 IO_STATUS_BLOCK  localIoStatus;
 PIO_STACK_LOCATION  irpSp = NULL;
 UNICODE_STRING   newFileName;
 HANDLE    handle;
 PFILE_OBJECT   targetFileObject;

 RtlInitUnicodeString(&UniFileString,L"\\Device\\HarddiskVolume2\\1.txt");

 InitializeObjectAttributes(
  &object,
  &UniFileString,
  OBJ_CASE_INSENSITIVE | OBJ_KERNEL_HANDLE,
  NULL,
  NULL);
 //打开文件,存在打开，不存在返回错误
 status = ZwCreateFile( &hFile,
  GENERIC_READ | GENERIC_WRITE,
  &object,
  &io_status,
  NULL,
  FILE_ATTRIBUTE_NORMAL,
  FILE_SHARE_READ,
  FILE_OPEN,
  FILE_NON_DIRECTORY_FILE |FILE_SYNCHRONOUS_IO_NONALERT,
  NULL,
  0);
 if(!NT_SUCCESS(status))
 {
  _asm int 3;
 }

 RenamInfo = (PFILE_RENAME_INFORMATION)ExAllocatePoolWithTag(NonPagedPool,1024,0);

 RenamInfo->ReplaceIfExists = FALSE;
 RenamInfo->RootDirectory = NULL;

 UniRenameStr.Buffer = RenamInfo->FileName;
 RenamInfo->FileNameLength = sizeof(ReNamePath) - sizeof(WCHAR);

 RtlCopyMemory(UniRenameStr.Buffer,ReNamePath,
  sizeof(ReNamePath));

 status = ObReferenceObjectByHandle( hFile,
    0,
    *IoFileObjectType,
    KernelMode,
    &FileObject,
    NULL);
 if (!NT_SUCCESS(status))
 {
   _asm int 3;
 }
 
/////////////////////////////////////////////////////////////////////////////////////////////////////////
// 以下为iosetinformationfile
 ObReferenceObject( FileObject );  
 KeInitializeEvent( &event, SynchronizationEvent, FALSE ); 
 deviceObject = IoGetRelatedDeviceObject( FileObject );
  
 irp = IoAllocateIrp( deviceObject->StackSize, TRUE );
    if (!irp) 
 {
  _asm int 3;
 }
 
 irp->Tail.Overlay.OriginalFileObject = FileObject;
    irp->Tail.Overlay.Thread = PsGetCurrentThread();
    irp->RequestorMode = KernelMode;
 
 irp->UserEvent = &event;
    irp->Flags = IRP_SYNCHRONOUS_API;
 
    irp->UserIosb = &localIoStatus;
 
    irpSp = IoGetNextIrpStackLocation( irp );
    irpSp->MajorFunction = IRP_MJ_SET_INFORMATION;
    irpSp->FileObject = FileObject;
 
 
 irp->AssociatedIrp.SystemBuffer = RenamInfo;
    irp->Flags |= IRP_BUFFERED_IO;
 
 irpSp->Parameters.SetFile.Length = 1024;
    irpSp->Parameters.SetFile.FileInformationClass = FileRenameInformation;
 
 irpSp->Parameters.SetFile.ReplaceIfExists = RenamInfo->ReplaceIfExists;
 
 if (RenamInfo->FileName[0] == (UCHAR) OBJ_NAME_PATH_SEPARATOR ||
            RenamInfo->RootDirectory != NULL) 
 {
 /////////////////////////////////////////////////////////
 // 以下IopOpenLinkOrRenameTarget
  ACCESS_MASK   accessMask = FILE_WRITE_DATA;
  OBJECT_ATTRIBUTES  objectAttributes;
  IO_STATUS_BLOCK  ioStatus;
  OBJECT_HANDLE_INFORMATION  handleInformation;
  
  newFileName.Length = (USHORT) RenamInfo->FileNameLength;
  newFileName.MaximumLength = (USHORT) RenamInfo->FileNameLength;
  newFileName.Buffer = RenamInfo->FileName;
  
  InitializeObjectAttributes( &objectAttributes,
                                &newFileName,
                                OBJ_CASE_INSENSITIVE|OBJ_KERNEL_HANDLE,
                                NULL,
                                NULL );
        
  status = IoCreateFile( &handle,
                               FILE_WRITE_DATA | SYNCHRONIZE,
                               &objectAttributes,
                               &ioStatus,
                               (PLARGE_INTEGER) NULL,
                               0,
                               FILE_SHARE_READ | FILE_SHARE_WRITE,
                               FILE_OPEN,
                               FILE_OPEN_FOR_BACKUP_INTENT,
                               (PVOID) NULL,
                               0L,
                               CreateFileTypeNone,
                               (PVOID) NULL,
          //IO_OPEN_TARGET_DIRECTORY |
                               IO_NO_PARAMETER_CHECKING |
          0x0004 |
                               IO_FORCE_ACCESS_CHECK );  
  if(!NT_SUCCESS(status))
  {
   _asm int 3;
  }
  status = ObReferenceObjectByHandle( handle,
                                              accessMask,
                                              *IoFileObjectType,
                                              KernelMode,
                                              (PVOID *) &targetFileObject,
                                              &handleInformation );  
  
   
  if(!NT_SUCCESS(status))
  {
   _asm int 3;
  }
  ObDereferenceObject( targetFileObject );
  
                if (IoGetRelatedDeviceObject( targetFileObject) !=
                    IoGetRelatedDeviceObject( FileObject )) {

                    _asm int 3;

                } else {
                    irpSp->Parameters.SetFile.FileObject = targetFileObject;
                    //*TargetHandle = handle;
                    status = STATUS_SUCCESS;

                }      


 }
 // 以上IopOpenLinkOrRenameTarget
 /////////////////////////////////////////////////////
 status = IoCallDriver( deviceObject, irp );
 if (status == STATUS_PENDING)
  KeWaitForSingleObject(&event, Executive, KernelMode, TRUE, 0);
 if(!NT_SUCCESS(status))
 {
  _asm int 3;
 }
 
 ZwClose( handle);
//  以上为IOSETINFORMATIONFILE 
////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
 
 ZwClose(hFile);
 ObDereferenceObject(FileObject);
 return STATUS_SUCCESS;
}