21,595
社区成员
发帖
与我相关
我的任务
分享
LARGE_INTEGER lrOffset = {0};
ZwCreateFile(lpFileHandle,
FILE_READ_DATA,
&oaName,
&iosBlock,
NULL,
FILE_ATTRIBUTE_NORMAL,
FILE_SHARE_READ,
FILE_OPEN,
FILE_NON_DIRECTORY_FILE | FILE_SYNCHRONOUS_IO_NONALERT,
NULL,
0);
ntStatus = ZwReadFile(hFile,
NULL,
NULL,
NULL,
&iosBlock,
pBuffer,
ulBufferSize,
ByteOffset,
NULL);
OBJECT_ATTRIBUTES objectAttributes;
IO_STATUS_BLOCK iostatus;
UNICODE_STRING logFileUnicodeString;
HANDLE hfile;
//初始化UNICODE_STRING
RtlInitUnicodeString( &logFileUnicodeString, L"\\??\\c:\\1.log" );
//初始化OBJECT_ATTRIBUTES结构体
InitializeObjectAttributes( &objectAttributes,
&logFileUnicodeString, OBJ_CASE_INSENSITIVE,
NULL, NULL );
//创建文件
NTSTATUS ntStatus = ZwCreateFile( &hfile, GENERIC_WRITE,
&objectAttributes,
&iostatus,
NULL,
FILE_ATTRIBUTE_NORMAL,
FILE_SHARE_READ,
FILE_OPEN_IF,
FILE_SYNCHRONOUS_IO_NONALERT,
NULL,
0 );
if ( NT_SUCCESS( ntStatus ) )
{
KdPrint( ( "Create File Success!\n" ) );
}
else
{
KdPrint( ( "CreateFile Fail!\n" ) );
}
ZwClose( hfile );