ObReferenceObjectByName的使用

声明

extern POBJECT_TYPE *IoDriverObjectType;

NTKERNELAPI

NTSTATUS

ObReferenceObjectByName(

						IN PUNICODE_STRING ObjectName,

						IN ULONG Attributes,

						IN PACCESS_STATE PassedAccessState OPTIONAL,

						IN ACCESS_MASK DesiredAccess OPTIONAL,

						IN POBJECT_TYPE ObjectType,

						IN KPROCESSOR_MODE AccessMode,

						IN OUT PVOID ParseContext OPTIONAL,

						OUT PVOID *Object

						);

使用

    ntStatus = ObReferenceObjectByName( &DriverName,

            OBJ_CASE_INSENSITIVE,

            NULL,

            0,

            *IoDriverObjectType,

            KernelMode,

            NULL,

            &DriverObject );