阅读:1387回复:0
请问这段机器狗的程序
读机器狗的驱动代码,因水平很菜,没有看懂,哪位大侠帮忙看看,谢谢!
if (!ZwOpenDirectoryObject(&DirectoryHandle, DIRECTORY_QUERY, &ObjectAttributes)) { if (!ObReferenceObjectByHandle(DirectoryHandle, 1, 0, 0, &Object, 0)) { if (Object) { count = 0; while (count < 0x28 ) { v10 = *((DWORD *)Object + count); if (v10) { devobj = *(PDEVICE_OBJECT*)(v10 + 4); if (devobj->Type == 3) { if (devobj->AttachedDevice) { dr0attach = devobj->AttachedDevice; dr0dev = devobj; devobj->AttachedDevice = 0; break; } } } ++count; } } ObDereferenceObject(Object); } ZwClose(DirectoryHandle); } |
|