SAMPLE: Zwcf.exe Uses ZwCreateFile() to Open File from Kernel

ID: Q126286

The information in this article applies to:

Microsoft Win32 Device Driver Kit (DDK) for Windows NT, versions 3.5, 3.51

SUMMARY

Zwcf.exe is a sample that demonstrates how to open a file from a Windows NT kernel-mode device driver using ZwCreateFile(). Once the file is open, it reads the contents of this file into a buffer using ZwReadFile(). After reading the file, it is closed using ZwClose().

NOTE: When you use the sample, the Info.dat file in the \SystemRoot\System32\Drivers directory must be available.

MORE INFORMATION

The following file is available for download from the Microsoft Software Library:

~ Zwcf.exe

For more information about downloading files from the Microsoft Software Library, please see the following article in the Microsoft Knowledge Base:

Q119591 How to Obtain Microsoft Support Files from Online Services


Keywords          : kbfile kbsample NTDDKKMode 
Version           : 
Platform          : 
Issue type        :

Last Reviewed: March 2, 1999