能力值:
( LV12,RANK:290 )
|
-
-
2 楼
NTSTATUS Status;
OBJECT_ATTRIBUTES oa;
UNICODE_STRING uniDirectory;
HANDLE hDirectory;
PVOID DirectoryObject = NULL;
WCHAR wzDirectory[] = {L'\\', L'\0'};
RtlInitUnicodeString(&uniDirectory, wzDirectory);
InitializeObjectAttributes(&oa, &uniDirectory, OBJ_CASE_INSENSITIVE | OBJ_KERNEL_HANDLE, NULL, NULL);
Status = ZwOpenDirectoryObject(&hDirectory, 0, &oa);
if (NT_SUCCESS(Status) )
{
Status = ObReferenceObjectByHandle(hDirectory, 0x10000000, 0, 0, &DirectoryObject, 0);
if ( NT_SUCCESS(Status) )
{
DirectoryObjectType = KeGetObjectType(DirectoryObject);
ObfDereferenceObject(DirectoryObject);
}
Status = ZwClose(hDirectory);
}
最后于 2018-3-23 11:18
被FaEry编辑
,原因:
|
|
|