<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Free2000fly&#039;s Official Blog &#187; 内核</title>
	<atom:link href="http://blog.tinybrowser.net/archives/tag/%e5%86%85%e6%a0%b8/feed" rel="self" type="application/rss+xml" />
	<link>http://blog.tinybrowser.net</link>
	<description>Free2000fly 个人博客</description>
	<lastBuildDate>Fri, 06 Jan 2012 21:12:47 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>在内核驱动中得到 KeServiceDescriptorTableShadow</title>
		<link>http://blog.tinybrowser.net/archives/1839</link>
		<comments>http://blog.tinybrowser.net/archives/1839#comments</comments>
		<pubDate>Fri, 21 May 2010 03:07:47 +0000</pubDate>
		<dc:creator>free2000fly</dc:creator>
				<category><![CDATA[内核编程]]></category>
		<category><![CDATA[KeServiceDescriptorTable]]></category>
		<category><![CDATA[KeServiceDescriptorTableShadow]]></category>
		<category><![CDATA[内核]]></category>

		<guid isPermaLink="false">http://blog.tinybrowser.net/?p=1839</guid>
		<description><![CDATA[头文件: 实现文件: 延伸阅读: Obtaining KeServiceDescriptorTableShadow address in Windows XP Kernel mode How Can I Get the Address of KeServiceDescriptorTableShadow KeServiceDescriptorTableShadow 的获取 城里城外看 SSDT System Calling Mechanism under Win32]]></description>
		<wfw:commentRss>http://blog.tinybrowser.net/archives/1839/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>关于 IoGetDeviceObjectPointer</title>
		<link>http://blog.tinybrowser.net/archives/1810</link>
		<comments>http://blog.tinybrowser.net/archives/1810#comments</comments>
		<pubDate>Wed, 19 May 2010 07:04:10 +0000</pubDate>
		<dc:creator>free2000fly</dc:creator>
				<category><![CDATA[内核编程]]></category>
		<category><![CDATA[技术心得]]></category>
		<category><![CDATA[IoGetDeviceObjectPointer]]></category>
		<category><![CDATA[内核]]></category>

		<guid isPermaLink="false">http://blog.tinybrowser.net/?p=1810</guid>
		<description><![CDATA[先看 IoGetDeviceObjectPointer() 的内部实现： 用 ZwOpenFile() 打开设备文件的 handle 用 ObReferenceObjectByHandle() 来得到 file object 用 IoGetRelatedDeviceObject() 来得到 device object 用 ZwClose() 来关闭这个 handle WRK 1.2 源代码如下: 关于 IoGetRelatedDeviceObject, MSDN 上如是说: IoGetRelatedDeviceObject Given a file object, the IoGetRelatedDeviceObject routine returns a pointer to the corresponding device object. Syntax PDEVICE_OBJECT IoGetRelatedDeviceObject( __in PFILE_OBJECT FileObject ); Parameters FileObject [in] Pointer [...]]]></description>
		<wfw:commentRss>http://blog.tinybrowser.net/archives/1810/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>创建有导出函数的内核驱动程序</title>
		<link>http://blog.tinybrowser.net/archives/1371</link>
		<comments>http://blog.tinybrowser.net/archives/1371#comments</comments>
		<pubDate>Sat, 27 Feb 2010 01:53:02 +0000</pubDate>
		<dc:creator>free2000fly</dc:creator>
				<category><![CDATA[内核编程]]></category>
		<category><![CDATA[内核]]></category>
		<category><![CDATA[函数]]></category>
		<category><![CDATA[导出]]></category>
		<category><![CDATA[驱动]]></category>

		<guid isPermaLink="false">http://blog.tinybrowser.net/?p=1371</guid>
		<description><![CDATA[testsys.def testsys.h testsys.c source TARGETNAME=testsys TARGETPATH=.\obj TARGETTYPE=EXPORT_DRIVER INCLUDES=$(IFSKIT_INC_PATH) SOURCES=testsys.c DLLDEF=.\testsys.def TARGETLIBS=$(DDK_LIB_PATH)\wdmsec.lib makefile # # DO NOT EDIT THIS FILE!!! Edit .\sources. if you want to add a new source # file to this component. This file merely indirects to the real make file # that is shared by all the driver components of the Windows [...]]]></description>
		<wfw:commentRss>http://blog.tinybrowser.net/archives/1371/feed</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>中文版 ASM KMD tut</title>
		<link>http://blog.tinybrowser.net/archives/597</link>
		<comments>http://blog.tinybrowser.net/archives/597#comments</comments>
		<pubDate>Sat, 05 Apr 2008 13:31:36 +0000</pubDate>
		<dc:creator>free2000fly</dc:creator>
				<category><![CDATA[内核编程]]></category>
		<category><![CDATA[日常琐碎]]></category>
		<category><![CDATA[16位]]></category>
		<category><![CDATA[ASM]]></category>
		<category><![CDATA[KMD]]></category>
		<category><![CDATA[内核]]></category>
		<category><![CDATA[驱动]]></category>

		<guid isPermaLink="false">http://blog.tinybrowser.net/?p=597</guid>
		<description><![CDATA[网上收集的关于用汇编语言编写 Windows 环境下的 KMD 驱动程序的教程, 由俄国人编写, 由罗云彬, 松松, 董岩翻译, 感谢所有这些人的辛勤劳动, 俺将这些散落在网络上的文章收集整理出来, 我想这些教程不止对使用汇编语言的人有帮助. 教程中文版的下载地址是 这里 KmdTutCn 附录: 选择那个汇编编译器, 如何编译 16 位 dos 和 32 位汇编程序 首先进入 masm32\bin目录，在dos下键入如下命令, 将分别编译 16 位和 32 位程序 如果是16位dos汇编代码 ml /Zm /c demo.asm link16 demo.obj 如果是32位汇编代码 ml /c /coff /I c:\masm32\include test.asm link /subsystem:windows test.obj]]></description>
		<wfw:commentRss>http://blog.tinybrowser.net/archives/597/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

