近日收到一个需求,要求读取smbios数据并从中解析出系统的UUID来用。这个以前曾经搞过,微软有一个与激活有关的硬件ID就是从smbios里获取数据根据算法来生成的。单说获取,在应用层可以使用:
UINT GetSystemFirmwareTable(
[in] DWORD FirmwareTableProviderSignature,
[in] DWORD FirmwareTableID,
[out] PVOID pFirmwareTableBuffer,
[in] DWORD BufferSize
);
当其
FirmwareTableProviderSignature参数是'RSMB'时表示要读取smbios的内容。
驱动中微软也提供了办法,第一种是调用
AuxKlibGetSystemFirmwareTable,和应用层的调用方法类似:
NTSTATUS AuxKlibGetSystemFirmwareTable(
[in] ULONG FirmwareTableProviderSignature,
[in] ULONG FirmwareTableID,
[out, optional] PVOID FirmwareTableBuffer,
[in] ULONG BufferLength,
[out, optional] PULONG ReturnLength
);
注意要先调用AuxKlibInitialize初始化。
第二种是调用WMI功能,要稍复杂一些,类似下面的代码:
NTSTATUS status;
GUID smbiosGUID = SMBIOS_DATA_GUID; //defined in wmiguid.h
PVOID wmiObject = NULL;
PWNODE_ALL_DATA dataBuffer;
//
// Get a WMI block handle to the SMBIOS_DATA_GUID
//
status = IoWMIOpenBlock( (GUID *) &smbiosGUID,
WMIGUID_QUERY,
&wmiObject );
if (!NT_SUCCESS(status)) {
return status;
}
//
// Determine how much space is required for the data
//
status = IoWMIQueryAllData( wmiObject, &bufferSize,
NULL );
if (status != STATUS_BUFFER_TOO_SMALL) {
ObDereferenceObject( wmiObject );
return status;
}
//
// Allocate the necessary storage. This space must come out of NP-pool
//
dataBuffer = ExAllocatePoolWithTag(
NonPagedPool,
bufferSize,
TAG_SMBIOS
);
if (dataBuffer == NULL) {
ObDereferenceObject( wmiObject );
return STATUS_INSUFFICIENT_RESOURCES;
}
注意SMBIOS_DATA_GUID应是{
8F680850-A584-11d1-BF38-00A0C9062910}。
当然获取到smbios数据只是第一步,解析smbios数据为有意义的信息是更复杂的一步,这个也有相关的标准,开源代码例子也有不少。