如何在驱动中访问系统服务调度表(System Service Dispatch Table)
frman 2006-01-16 12:33:30 我在网上找了段可以实现驱动级隐藏文件的代码,但在ddk编译时却出现了
error LNK2001: unresolved external symbol _KeServiceDescriptorTable
这个错误。请问应该如何解决啊?
sources文件:
TARGETNAME=skykernel
TARGETTYPE=DRIVER
DRIVERTYPE=WDM
TARGETPATH=obj
BROWSER_INFO=1
C_DEFINES=-DDRIVER
INCLUDES=$(BASEDIR)\inc
SOURCES=skykernel.c
驱动核心文件部分:
#include "ntddk.h"
#include "string.h"
#define IOCTL_EVENT_MSG CTL_CODE(FILE_DEVICE_UNKNOWN, 0x927, METHOD_BUFFERED , FILE_ANY_ACCESS)
typedef struct _ServiceDescriptorEntry {
unsigned int *ServiceTableBase;
unsigned int *ServiceCounterTableBase;
unsigned int NumberOfServices;
unsigned char *ParamTableBase;
}ServiceDescriptorTableEntry, *PServiceDescriptorTableEntry;
//ULONG KeServiceDescriptorTable = 0x8046AB80;
extern PServiceDescriptorTableEntry KeServiceDescriptorTable;