-
-
[求助]ZwDeviceIoControlFile 的问题
-
发表于:
2011-3-24 19:36
5714
-
[求助]ZwDeviceIoControlFile 的问题
在hook ZwDeviceIoControlFile( __in HANDLE FileHandle,
__in_opt HANDLE Event,
__in_opt PIO_APC_ROUTINE ApcRoutine,
__in_opt PVOID ApcContext,
__out PIO_STATUS_BLOCK IoStatusBlock,
__in ULONG IoControlCode,
__in_opt PVOID InputBuffer,
__in ULONG InputBufferLength,
__out_opt PVOID OutputBuffer,
__in ULONG OutputBufferLength);
有没有办法,可以像HOOK DeviceIoControl(
DWORD dwIoControlCode,
LPVOID lpInBuffer,
DWORD nInBufferSize,
LPVOID lpOutBuffer,
DWORD nOutBufferSize,
LPDWORD lpBytesReturned,
LPOVERLAPPED lpOverlapped
);
可以得到操作结果的长度; 即lpBytesReturned,DeviceIoControl()把操作长度返回这个地址。而ZwDeviceIoControlFile 要如何获取!
[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课