VC写的驱动隐藏注册表项

易语言 2020-07-23 11:49:16

VC写的驱动隐藏注册表项

m_hDri = CreateFile (“\\.\hookreg”, 位异或 (#GENERIC_READ, #GENERIC_WRITE), 位异或 (#FILE_SHARE_READ, #FILE_SHARE_WRITE), 0, #OPEN_EXISTING, #FILE_FLAG_OVERLAPPED, 0)
.如果真 (m_hDri = #INVALID_HANDLE_VALUE)
' 信息框 (“创建设备失败”, 0, )
.如果真结束
ctl_code = sys.CTL_CODE (34, “80B”, #METHOD_BUFFERED, 0)
buffer = AnsiToUnicode (表项)
Code = DeviceIoControl (m_hDri, ctl_code, Ab (buffer), 取字节集长度 (buffer + { 0, 0 }), 0, 0, dwBytesReturned, 0)
.判断开始 (Code = 0)
Code = GetLastError ()
输出调试文本 (Code)
bReturnCode = 假
.默认
bReturnCode = 真
.判断结束
.如果真 (bReturnCode = 假)
CloseHandle (m_hDri)
m_hDri = #NULL
返回 (假)