![]() |
|
#1
|
|||
|
|||
|
Hi guys ,
I'm writnig a filter driver . I want to work with files in kernel mode , but the problem is when I call ZwCreateFile / ZwClose to work on a file , these Zw APIs create an MJ_CREATE/CLOSE IRP and comes back to my dispatch routine . So what should i do ? Enjoy ur time... |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Hi there~ Im back.. | OrionOnion | General Discussion | 3 | 01-03-2014 05:29 |
| Come Back | LOUZEW | General Discussion | 12 | 10-01-2013 18:55 |
| decompiling back to C++? | Rhodium | General Discussion | 44 | 10-11-2004 08:30 |