You can rollup your oqn IRP : IRP_MJ_DIRECTORY_CONTROL/IRP_MN_QUERY_DIRECTORY, but this that ZwQueryDirectoryFile doing internally.
Windows Driver Listing Files to WinDbg Console
-
01-06-2022 - |
Question
i'v already posted a question [question] : Directory relative ZwCreateFile
but i am unable to build the driver. I have posted the error as well. So i was wondering is there any other way to list files in a directory(kernel space) without using "ZwQueryDirectoryFile" routine.
Solution
Licensed under: CC-BY-SA with attribution
Not affiliated with StackOverflow