-
-
[求助]驱动编程中ACCESS_MASK 是怎么查到的
-
发表于:
2014-5-15 16:42
3059
-
[求助]驱动编程中ACCESS_MASK 是怎么查到的
好多函数中都给出了,IN ACCESS_MASK DesiredAccess
但是没给出,从哪找到这个,比如这个 ObReferenceObjectByHandle函数
NTSTATUS ObReferenceObjectByHandle(
IN HANDLE Handle,
IN ACCESS_MASK DesiredAccess,
IN POBJECT_TYPE ObjectType OPTIONAL,
IN KPROCESSOR_MODE AccessMode,
OUT PVOID *Object,
OUT POBJECT_HANDLE_INFORMATION HandleInformation OPTIONAL
);
DesiredAccess
Specifies the requested types of access to the object. The interpretation of this field is dependent on the object type. Do not use any generic access rights.
注释说依赖于具体类型,但是具体类型的这个又从哪找?
求大神指点指点
[课程]FART 脱壳王!加量不加价!FART作者讲授!