怎样转换出 UNICODE_STRING 中的字符串
我HOOK了NtCreateMutant想判断互斥体名称,但是不知道怎么转换UNICODE_STRING的字符串,假如我要判断的互斥体名称为ABCD,,我该怎么判断呢?程序代码:
Private Function MyNtCreateMutant(ByVal MutantHandle As Long, ByVal DesiredAccess As Long, ObjectAttributes As POBJECT_ATTRIBUTES, ByVal InitialOwner As Long) As Long Dim Ret As Long Dim strObjectName As String Dim strUnicode As UNICODE_STRING 'MsgBox ObjectAttributes.ObjectName.Buffer 'RtlInitUnicodeString strUnicode, StrPtr(strObjectName) '初始化Unicode字符串 'MsgBox GetStr(ObjectAttributes.ObjectName) RtlInitUnicodeString VarPtr(strUnicode), StrPtr(strObjectName) ObjectAttributes.ObjectName = VarPtr(strUnicode) 'MsgBox strObjectName ‘这里怎么转换出ObjectAttributes 中的UNICODE_STRING字符串呢?头要炸了 UnHookNtCreateMutant MyNtCreateMutant = NtCreateMutant(MutantHandle, DesiredAccess, ObjectAttributes, InitialOwner) MsgBox strObjectName HookNtCreateMutant End Function
[此贴子已经被作者于2015-12-27 12:53编辑过]