No self-introduction
Loading
Profile
Follow
codes (1)
Hide folders
4.0
Using the hiding mainly in IRP_MJ_DIRECTORY_CONTROL driven processes its input parameter in the callback function after the operation FLT_CALLBACK_DATA the buffer data structure. The acquisition of the buffer address is focused on,Data->Iopb-> Parameters.DirectoryControl.QueryDirectory.DirectoryBuffer (or MdlAddress) Internet existing code does not support due to Vista or Win7, XP or later returns the FileInformationClass structure is no longer FileBothDirectoryInformation, but FileIdBothDirectoryInformation
zhanglei17 3 0
1
No more~
Follows0
Fans0