#ifndef _IOCTL_H_
#define _IOCTL_H_

//#include <ntddk.h>
#define CTL_CODE( DeviceType, Function, Method, Access ) (                 \
    ((DeviceType) << 16) | ((Access) << 14) | ((Function) << 2) | (Method) \
)
#define FILE_DEVICE_UNKNOWN             0x00000022
#define METHOD_BUFFERED                 0
#define FILE_WRITE_ACCESS         ( 0x0002 )    // file & pipe

#define IOCTL_ATTACH_KILL                (DWORD)CTL_CODE(FILE_DEVICE_UNKNOWN, 0x01, METHOD_BUFFERED, FILE_WRITE_ACCESS)
#define IOCTL_ULODE_DLL_KILL        (DWORD)CTL_CODE(FILE_DEVICE_UNKNOWN, 0x02, METHOD_BUFFERED, FILE_WRITE_ACCESS)
#define IOCTL_THREAD_KILL        (DWORD)CTL_CODE(FILE_DEVICE_UNKNOWN, 0x03, METHOD_BUFFERED, FILE_WRITE_ACCESS)
#define IOCTL_OBXXXX_KILL        (DWORD)CTL_CODE(FILE_DEVICE_UNKNOWN, 0x04, METHOD_BUFFERED, FILE_WRITE_ACCESS)
#define IOCTL_APC_KILL                (DWORD)CTL_CODE(FILE_DEVICE_UNKNOWN, 0x05, METHOD_BUFFERED, FILE_WRITE_ACCESS)
#define IOCTL_STOP_KILL                (DWORD)CTL_CODE(FILE_DEVICE_UNKNOWN, 0x06, METHOD_BUFFERED, FILE_WRITE_ACCESS)
#define IOCTL_PS_KILL                (DWORD)CTL_CODE(FILE_DEVICE_UNKNOWN, 0x07, METHOD_BUFFERED, FILE_WRITE_ACCESS)

#endif

define IOCTL_OBXXXX_KILL

如果调用这个 那它的驱动通信代码(IoControlCode)怎么得到?

谢谢大家啦~

[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课