SAMPLE: Zwcf.exe Uses ZwCreateFile() to Open File from Kernel |
Q126286
The information in this article applies to:
- Microsoft Win32 Device Driver Kit (DDK) for Windows NT, versions 3.5, 3.51
SUMMARY
Zwcf.exe is a sample that demonstrates how to open a file from a Windows NT kernel-mode device driver using ZwCreateFile(). Once the file is open, it reads the contents of this file into a buffer using ZwReadFile(). After reading the file, it is closed using ZwClose().
NOTE: When you use the sample, the Info.dat file in the \SystemRoot\System32\Drivers directory must be available.
MORE INFORMATION
The following file is available for download from the Microsoft Download Center:
For additional information about how to download Microsoft Support files, click the article number below to view the article in the Microsoft Knowledge Base:
Q119591 How to Obtain Microsoft Support Files from Online Services
Microsoft used the most current virus detection software available on the date of posting to scan this file for viruses. Once posted, the file is housed on secure servers that prevent any unauthorized changes to the file.
Additional query words:
Keywords : kbfile kbsample
Issue type :
Technology : kbAudDeveloper kbWinDDKSearch kbWin32sSearch kbWin32DDKSearch kbWin32DDKNT350 kbWin32DDKNT351 kbWin32DDKNTSearch
Last Reviewed: December 6, 1999 |