here i try to do comunication via IOCTL_CODE with driver.
What is wrong in this code can someone explain ?
1. I register and run driver with use manager - all ok.
2. I try run program.exe - some error my Vbox crash and restart without BSOD
DO NOT USE THIS CODE IT WAS CATASTROPHE

Line 129


What are you printing here?

This is not user mode. Anything that tickles the OS in ring0 will trip it.
Also, drivers are hard to debug without the KD. Get the KD and use to to debug it.

But it has to load () first to be debugged.

1. What it KD ?
2.
it a stringZ to display in DbgView.exe. - may get thise same arguments
like printf function.

Look at thise example code - ApiScannerOld (without IOCTL )
Its hooked ZwCreateFile, ZwClose, ZwDeleteFile and display they
parameters in DbgPrint.exe via "DbgPrint".

i always use "DbgPrint" in kernel-drivers and iknow that other people used
too.
It always worked correctly in my code
.

Kernel-mode Debugger.

Anyone developing a kernel-mode driver will find it harder to fix bugs without a good kernel-mode debugger.

I do not want visual studio - is ther some KD without VS ?
or may someone give a example code with IOCTL comunication in FASM - I will be thankful?
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
ok i done it myself. Following project have comunication in-out via IOCTL. For brightness the code i was modyfing file NT Structures.inc from DDK.INC so included this file to project and added some macrodefinition: IoGetCurrentIrpStackLocation , CTL_CODE ... every are enclosure in DDK.MACROS file.
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------