PsSetLoadImageNotifyRoutine FullImageName error
I call PsSetLoadImageNotifyRoutine(ImageLoadNotify) in DriverEntry.
VOID ImageLoadNotify(
IN PUNICODE_STRING FullImageName,
IN HANDLE ProcessId, // where image is mapped
IN PIMAGE_INFO ImageInfo
)
{
…I access FullImageName…
}
In Win2K,WinXP and Win2k3,it works well.
But in chinese Win2K,when I execute a .exe file(the path including chinese chars),the FullImageName->Buffer will error.
example:
the file is C:\Test\测试\a.exe
(测试 is some chinese chars)
I execute it.
in my ImageLoadNotify,the FullImageName will be C:\Test\测试\a.e
God!Where’s the “xe”?
AnyBody can explain it?and What Should I do?
It’s just in Win2K.