-
-
[已解决]怎么用FileHandle获得文件名呢?
-
发表于:
2011-2-22 05:37
6635
-
[已解决]怎么用FileHandle获得文件名呢?
NTSTATUS MyNtReadFile(
IN HANDLE FileHandle,
IN HANDLE Event,
IN PIO_APC_ROUTINE ApcRoutine,
IN PVOID ApcContext,
OUT PIO_STATUS_BLOCK IoStatusBlock,
OUT PVOID Buffer,
IN ULONG Length,
IN PLARGE_INTEGER ByteOffset,
IN PULONG Key
)
{
POBJECT_ATTRIBUTES ObjectAttributes;
ObReferenceObjectByHandle(FileHandle,0, *IoFileObjectType,KernelMode,&ObjectAttributes,NULL);
DbgPrint("ReadFile FilePath Is %ws\n",ObjectAttributes->ObjectName->Buffer);
ObDereferenceObject(ObjectAttributes);
OldReadFile(FileHandle,Event,ApcRoutine,ApcContext,IoStatusBlock,Buffer,Length,ByteOffset,Key);
}
用FileHandle获得文件名不应该使用ObReferenceObjectByHandle吗?蓝啊蓝啊蓝啊蓝
[培训]《安卓高级研修班(网课)》月薪三万计划,掌握调试、分析还原ollvm、vmp的方法,定制art虚拟机自动化脱壳的方法