|
|
#6
01-19-2005, 20:02
|
|||
|
|||
Two method:
1. Add a special flag on you call to zwCreateFile/zwCloseFile so that your driver can distinct them. 2. Create file and close file directly use IRP to lower driver. You must construct IRP that you want to use. It is very difficult because many things is undocument. But it may be work. 
|
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Hi there~ Im back.. | OrionOnion | General Discussion | 3 | 01-03-2014 05:29 |
| Come Back | LOUZEW | General Discussion | 12 | 10-01-2013 18:55 |
| decompiling back to C++? | Rhodium | General Discussion | 44 | 10-11-2004 08:30 |
Threaded Mode