管理驱动程序初级模板
// 管理驱动程序
#ifndef _CDRIVER_H_
#define _CDRIVER_H_
#include <winsvc.h> // 使用SCM函数
class CDriver
{
public:
/*
* 参数: pszDriverpath 为驱动所在的目录,pszLinkName 为符号连接名字
* 功能: 试图创建和打开服务
*/
CDriver(LPCTSTR pszDriverPath, LPCTSTR pszLinkName);
virtual ~CDriver();
// 属性
// 此驱动是否可用
virtual BOOL IsValid(){return (m_hSCM != NULL && m_hService != NULL)};
// 操作
// 开启服务, 启动后将会调用DriverEntry 函数将被调用
virtual BOOL StartDriver();
// 结束服务, 结束后会调用 DriverUnload 函数将会被调用
virtual BOOL StopDriver();
// 打开设备, 取得此驱动的一个句柄
virtual BOOL OpenDevice();
// 向设备发送控制代码
virtual DWORD IoControl(DWORD nCode, PVOID pInBuffer, DWORD nInCount, PVOID pOutBuffer, DWORD nOutCount);
// 实现
protected:
char m_szLinkName[56]; // 符号连接名称
BOOL m_bStarted; // 指定服务是否启动
BOOL m_bCreateService; // 指定是否创建服务
HANDLE m_hSCM; // SCM 数据库句柄
HANDLE m_hService; // 服务句柄
HANDLE m_hDriver; // 设备句柄
};
CDriver :: CDriver(LPCTSTR pszDriverPath, LPCTSTR pszLinkName)
{
strncpy(m_szLinkName, pszLinkName, 55);
m_bStarted = FALSE;
m_bCreateService = FALSE;
m_hService = NULL;
m_hService = INVALID_HANDLE_VALUE;
// 打开SCM 管理器
m_hSCM = OpenSCManager(NULL, NULL, SC_MANAGER_ALL_ACCESS);
if (m_hSCM == NULL)
{
MessageBox(0, "打开服务控制管理器失败\n", "可能是因为您不拥有Administrator 权限\n", MB_OK);
return ;
}
// 创建或打开服务
m_hService = CreateService(m_hSCM, m_szLinkName, m_szLinkName, SERVICE_KERNEL_DRIVER,
SERVICE_DEMAND_START, SERVICE_ERROR_NORMAL, pszDriverPath, NULL, 0, NULL, NULL, NULL);
if (m_hService == NULL)
{
// 创建服务失败, 可能因为服务已经存在,所以还要试图打开它
int nError = GetLastError();
if (nError == ERROR_SERVICE_EXISTS || nError == ERROR_SERVICE_MARKED_FOR_DELETE)
{
m_hService = OpenService(m_hSCM, m_szLinkName, SERVICE_ALL_ACCESS);
}
}
else
{
m_hService = TRUE;
}
}
CDriver :: ~CDriver
{
// 关闭设备句柄
if (m_hDriver != INVALID_HANDLE_VALUE)
{
CloseHandle(m_hDriver);
}
// 如果创建了服务，将之删除掉
if (m_bCreateService)
{
StopDriver();
DeleteService(m_hService);
}
// 关闭句柄
if (m_hService != NULL)
{
CloseServiceHandle(m_hService);
}
if (m_hSCM != NULL)
{
CloseServiceHandle(m_hSCM);
}
}
BOOL CDriver :: OpenDevice()
{
if (m_bStarted)
return TRUE;
if (m_hService == NULL)
return FALSE;
// 启动服务
if (!StartService(m_hService, 0, NULL))
{
int nError = GetLastError();
if (nError == ERROR_SERVICE_ALREADY_RUNNING)
{
m_bStarted = TRUE;
}
else
{
DeleteService(m_hService);
}
}
else
{
// 启动成功后，等待服务进入运行状态
int nTry = 0;
SERVICE_STATUS ss;
QueryServiceStatus(m_hService, &ss);
while(ss.dwCurrentState == SERVICE_START_PENDING && nTry++ < 80)
{
Sleep(50);
QueryServiceStatus(m_hService, &&ss);
}
if (ss.dwCurrentState == SERVICE_RUNNING)
{
m_bStarted = TRUE;
}
}
return m_bStarted;
}
BOOL CDriver :: StopDriver()
{
if (!m_bStarted)
return TRUE;
if (m_hService == NULL)
return FALSE;
// 停止服务
SERVICE_STATUS ss;
if (!ControlService(m_hService, SERVICE_CONTROL_STOP, &&ss))
{
if (GetLastError() == ERROR_SERVICE_NOT_ACTIVE)
{
m_bStarted = FALSE;
}
else
{
// 等待服务完全停止运行
int nTry = 0;
while(ss.dwCurrentState == SERVICE_START_PENDING && nTry++ < 80)
{
Sleep(50);
QueryServiceStatus(m_hService, &&ss);
}
if (ss.dwCurrentState == SERVICE_STOPPED)
{
m_bStarted = FALSE;
}
}
}
return !m_bStarted;
}
BOOL CDriver :: StartDriver()
{
if (m_hDriver != INVALID_HANDLE_VALUE)
return TRUE;
char sz[256] = "";
wsprintf(sz, "\\\\.\\%s", m_szLinkName);
// 打开驱动程序所控制的设备
m_hDriver = CreateFile(sz, GENERIC_READ | GENERIC_WRITE, 0, NULL, OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL, NULL);
return (m_hDriver != INVALID_HANDLE_VALUE);
}
DWORD CDriver :: IoControl(DWORD nCode, PVOID pInBuffer, DWORD nInCount, PVOID pOutBuffer, DWORD nOutCount)
{
if (m_hDriver == INVALID_HANDLE_VALUE)
return -1;
// 向驱动程序发送控制代码
DWORD nBytesReturn;
BOOL bRet = DeviceIoControl(m_hDriver, nCode, pInBuffer, nInCount, pOutBuffer, &nOutCount, &nBytesReturn, NULL);
if (bRet)
{
return nBytesReturn;
}
else
{
return -1;
}
return 0;
}
#endif
