内核模式下的字符串操作

VOID StringTest()
{
// ASCII 字符串
CHAR* char1="Hello,World";
KdPrint(("char1=%s\r\n",char1));

// 宽字符字符串
WCHAR* wchar1=L"Hello,World";
KdPrint(("wchar1=%ws\r\n",wchar1));
KdPrint(("wchar1=%S\r\n",wchar1));

// 内核模式下的ANSI字符串
ANSI_STRING ansistring;
RtlInitAnsiString(&ansistring,char1);
KdPrint(("ansistring=%Z\r\n",&ansistring));
KdPrint(("ansistring长度=%d",ansistring.Length));
RtlInitAnsiString(&ansistring,"KERNEL");
KdPrint(("ansistring=%Z\r\n",&ansistring));
KdPrint(("ansistring长度=%d",ansistring.Length));

// 内核模式下的UNICODE字符串
UNICODE_STRING unicodestring;
RtlInitUnicodeString(&unicodestring,wchar1);
KdPrint(("unicodestring=%wZ\r\n",&unicodestring));
KdPrint(("unicodestring.length=%d",unicodestring.Length));
RtlInitUnicodeString(&unicodestring,L"KERNEL");
KdPrint(("unicodestring=%wZ\r\n",&unicodestring));
KdPrint(("unicodestring.length=%d",unicodestring.Length));

// 内核模式下的ANSI字符串拷贝
ANSI_STRING ansistring1;
ansistring1.Length=0;
ansistring1.Buffer=(CHAR*)ExAllocatePool(PagedPool,1024);
ansistring1.MaximumLength=1024;
KdPrint(("拷贝前ansistring1=%Z\r\n",&ansistring1));
KdPrint(("拷贝前ansistring1.length=%d",ansistring1.Length));
KdPrint(("拷贝前ansistring1.MaxLength=%d",ansistring1.MaximumLength));
RtlCopyString(&ansistring1,&ansistring);
KdPrint(("拷贝后ansistring1=%Z\r\n",&ansistring1));
KdPrint(("拷贝后ansistring1.length=%d",ansistring1.Length));
KdPrint(("拷贝后ansistring1.MaxLength=%d",ansistring1.MaximumLength));
RtlFreeAnsiString(&ansistring1);

// 内核模式下的UNICODE字符串拷贝
UNICODE_STRING unicodestring1;
unicodestring1.Length=0;
unicodestring1.MaximumLength=1024;
unicodestring1.Buffer=(WCHAR*)ExAllocatePool(PagedPool,1024);
KdPrint(("拷贝前unicodestring1=%wZ\r\n",&unicodestring1));
KdPrint(("拷贝前unicodestring1.Length=%d\r\n",unicodestring1.Length));
KdPrint(("拷贝前unicodestring1.MaximumLength=%d\r\n",unicodestring1.MaximumLength));
RtlCopyUnicodeString(&unicodestring1,&unicodestring);
KdPrint(("拷贝后unicodestring1=%wZ\r\n",&unicodestring1));
KdPrint(("拷贝后unicodestring1.Length=%d\r\n",unicodestring1.Length));
KdPrint(("拷贝后unicodestring1.MaximumLength=%d\r\n",unicodestring1.MaximumLength));
RtlFreeUnicodeString(&unicodestring1);

// 内核模式下的ANSI字符串比较
ANSI_STRING ansistring2;
RtlInitAnsiString(&ansistring2,"YJZ");
LONG lRet=RtlCompareString(&ansistring,&ansistring2,TRUE);
KdPrint(("ansistring=%Z\r\n",&ansistring));
KdPrint(("ansistring2=%Z\r\n",&ansistring2));
KdPrint(("比较结果=%d\r\n",lRet));

// 字符串转换为大写
ANSI_STRING ansistr;
RtlInitAnsiString(&ansistr,"Hello,World");
ANSI_STRING ansistr1;
ansistr1.MaximumLength=ansistr.Length;
ansistr1.Buffer=(CHAR*)ExAllocatePool(PagedPool,ansistr1.MaximumLength);
RtlUpperString(&ansistr1,&ansistr);
KdPrint(("%Z转换为大写=%Z\r\n",&ansistr,&ansistr1));
RtlFreeAnsiString(&ansistr1);
UNICODE_STRING unicodestr,unicodestr1;
RtlInitUnicodeString(&unicodestr,L"Hello,World");
RtlUpcaseUnicodeString(&unicodestr1,&unicodestr,TRUE);
KdPrint(("%wZ转换为大写=%wZ",&unicodestr,&unicodestr1));
RtlFreeUnicodeString(&unicodestr1);

// 字符串与整形转换
UNICODE_STRING ustr;
ULONG lValue=0;
RtlInitUnicodeString(&ustr,L"-100");
if (NT_SUCCESS(RtlUnicodeStringToInteger(&ustr,10,&lValue)))
{
KdPrint(("%wZ转换为整形后=%d\r\n",&ustr,lValue));
}
ustr.Buffer=(WCHAR*)ExAllocatePool(PagedPool,256);
if (NT_SUCCESS(RtlIntegerToUnicodeString(200,10,&ustr)))
{
KdPrint(("%d转换为字符串之后=%wZ,长度=%d\r\n",200,&ustr,ustr.Length));
}

// ANSI_STRING 与UNICODE_STRING互相转换
ANSI_STRING ansistr2;
RtlInitAnsiString(&ansistr2,"Hello,World");
UNICODE_STRING unicodestr2;
if (NT_SUCCESS(RtlAnsiStringToUnicodeString(&unicodestr2,&ansistr2,TRUE)))
{
KdPrint(("AnsiString:%Z转换为UnicodeString后为:%wZ\r\n",&ansistr2,&unicodestr2));
RtlFreeUnicodeString(&unicodestr2);
}

UNICODE_STRING ustr3;
RtlInitUnicodeString(&ustr3,L"Hello,World");
ANSI_STRING ansistr3;
if (NT_SUCCESS(RtlUnicodeStringToAnsiString(&ansistr3,&ustr3,TRUE)))
{
KdPrint(("UNICODE_STRING:%wZ转换为ANSI_STRING之后=%Z\r\n",&ustr3,&ansistr3));
RtlFreeAnsiString(&ansistr3);
}