The simplest Windows Driver for compiling, installing, running, and uninstalling

 

1. Compile:

Use the launch Windows XP x86 checked build environment Shortcut of DDK to start a console, switch to the directory where the basedrv code is located, and enter the command build.

2. Installation

Use osrloader.exe to install the driver. Click Browse, select the basedrv. SYS file, and click Register services.

You can see in the Registry Editor that a new registry branch is created: HKEY_LOCAL_MACHINE/system/CurrentControlSet/services/basedrv. Type = 1 indicates that the service is a driver; Start = 3 indicates that the service is manually run, 0 indicates that the service is boot, and 1 indicates the system driver.

3. Run

Click Start services of osrloader.exe to run the driver.

When running, you can use dbgview to hook capture =-> capture kernel to view the output "base DRV entry" when the DriverEntry function is running ".

Run derview and add basedrv to the driver branch.

The second parameter of DriverEntry is "/Registry/machine/system/controlset001/services/basedrv ".

4. Uninstall

Click Stop services of osrloader.exe to uninstall the driver.

Dbgview shows the output "unlond base DRV" of driverunload ".