-
-
[旧帖] [求助]r0下怎么获取系统所在盘符？ 0.00雪花
-
发表于: 2010-12-16 11:10
-
|
|
|---|---|
|
|
|
|
|
不懂 要问啥.......是不是 文件所在盘符，也就是文件路劲的前缀盘符....
|
|
|
|
|
|
RtlInitUnicodeString (&usDirName,L"\\KnownDlls");
InitializeObjectAttributes( &ObjDir,
&usDirName,
OBJ_CASE_INSENSITIVE|OBJ_KERNEL_HANDLE,
NULL,
NULL);
st = ZwOpenDirectoryObject ( &hDir,
DIRECTORY_QUERY,
&ObjDir);
RtlInitUnicodeString (&usSymbolicName , L"KnownDllPath");
InitializeObjectAttributes(&ObjSymbolic,&usSymbolicName,OBJ_CASE_INSENSITIVE|OBJ_KERNEL_HANDLE,hDir,NULL);
st = ZwOpenSymbolicLinkObject (&hSymbolic,
GENERIC_READ,
&ObjSymbolic);
usSymbolic.Buffer = wchBuffer;
usSymbolic.MaximumLength = 256*sizeof(WCHAR);
usSymbolic.Length =0;
st = ZwQuerySymbolicLinkObject ( hSymbolic,
&usSymbolic,
NULL);
KdPrint(("KnownDllPath: %wZ \n",&usSymbolic));
//去掉了部分错误判断，感谢长风傲天的代码，学习了。
 |
|
|
|
