阅读:2133回复:1
如何获取创建文件的全路径
ssdt hook了zwCreateFile 请教怎样获取文件的全路径?
|
|
沙发#
发布于:2009-05-28 22:00
typedef struct _OBJECT_ATTRIBUTES {
ULONG Length; HANDLE RootDirectory; PUNICODE_STRING ObjectName; // here .......................... ULONG Attributes; PVOID SecurityDescriptor; PVOID SecurityQualityOfService; } OBJECT_ATTRIBUTES, *POBJECT_ATTRIBUTES; typedef CONST OBJECT_ATTRIBUTES *PCOBJECT_ATTRIBUTES; |
|
|