尝试HOOK ZwSetValueKey的时候，准备在设备扩展里保存进程路径、进程名称、操作注册表的一些信息，但是在与应用层交互之前打印了一下，发现部分信息已经乱码，请教一下各位大侠

NTSTATUS NewZwSetValueKey(
IN HANDLE KeyHandle,
IN PUNICODE_STRING ValueName,
IN ULONG TitleIndex OPTIONAL,
IN ULONG Type,
IN PVOID Data,
IN ULONG DataSize)
{
        deviceExtension->ProcName=(PCHAR )APN;
        deviceExtension->ProcFullPath=(PCHAR )aProcessPath.Buffer;
        deviceExtension->Info1=(PCHAR )akeyname.Buffer;
        deviceExtension->Info2=(PCHAR )keyname.Buffer;
       
        KdPrint(("deviceExtension->ProcName:%s",deviceExtension->ProcName));//正常
        KdPrint(("deviceExtension->ProcFullPath:%s",deviceExtension->ProcFullPath));//正常
        KdPrint(("deviceExtension->Info1:%s",deviceExtension->Info1));//正常
        KdPrint(("deviceExtension->Info2:%s",deviceExtension->Info2));//正常
}                               

NTSTATUS DispatchDeviceControl(IN PDEVICE_OBJECT  DeviceObject,IN PIRP  Irp)
{
        KdPrint(("deviceExtension->ProcName:%s",deviceExtension->ProcName));//乱码
        KdPrint(("deviceExtension->ProcFullPath:%s",deviceExtension->ProcFullPath));//只有这里正常
        KdPrint(("deviceExtension->Info1:%s",deviceExtension->Info1));//乱码
        KdPrint(("deviceExtension->Info2:%s",deviceExtension->Info2));//乱码
}

[注意]传递专业知识、拓宽行业人脉——看雪讲师团队等你加入！