SAMPLE: Zwcf.exe Uses ZwCreateFile() to Open File from Kernel

ID: Q126286

The information in this article applies to:

Microsoft Win32 Device Driver Kit (DDK) for Windows NT, versions 3.5, 3.51

SUMMARY

Zwcf.exe is a sample that demonstrates how to open a file from a Windows NT kernel-mode device driver using ZwCreateFile(). Once the file is open, it reads the contents of this file into a buffer using ZwReadFile(). After reading the file, it is closed using ZwClose().

NOTE: When you use the sample, the Info.dat file in the \SystemRoot\System32\Drivers directory must be available.

MORE INFORMATION

The following file is available for download from the Microsoft Download Center. Click the file name below to download the file:

Zwcf.exe

For more information about how to download files from the Microsoft Download Center, please visit the Download Center at the following Web address

http://www.microsoft.com/downloads/search.asp

and then click How to use the Microsoft Download Center.

Additional query words:

Keywords : kbfile kbsample NTDDKKMode
Version : winnt:3.5,3.51
Platform : winnt
Issue type :