I found the first 4k
and last 4k+1k of the .doc file were not encrypt
after I change the original encrypted file.
I did not change the file size, is there anything
more besides the IRP_MJ_CREATE/READ/WRITE?
I found the first 4k
and last 4k+1k of the .doc file were not encrypt
after I change the original encrypted file.
I did not change the file size, is there anything
more besides the IRP_MJ_CREATE/READ/WRITE?