本文整理自网络，侵删。
ZwDeleteFile删文件..........
const
OBJ_CASE_INSENSITIVE = $00000040;
STATUS_SUCCESS = $00000000;
type
NTSTATUS= DWORD;
PVOID= Pointer;
PUnicodeString = ^TUnicodeString;
TUnicodeString = packed record
Length: Word;
MaximumLength: Word;
Buffer: PWideChar;
end;
UNICODE_STRING = TUnicodeString;
PUNICODE_STRING = ^UNICODE_STRING;
POBJECT_ATTRIBUTES = ^TOBJECT_ATTRIBUTES;
TOBJECT_ATTRIBUTES = record
Length: Cardinal;
RootDirectory: THANDLE;
ObjectName: PUNICODE_STRING;
Attributes: Dword;
SecurityDescriptor: pointer; // Points to type SECURITY_DESCRIPTOR
SecurityQualityOfService: pointer; // Points to type SECURITY_QUALITY_OF_SERVICE
end;
procedure RtlInitUnicodeString (var Buffer: TUnicodeString;Source: PWideChar); stdcall;external 'ntdll.dll';
function ZwDeleteFile(ObjectAttributes :POBJECT_ATTRIBUTES): NTSTATUS; stdcall;external 'ntdll.dll';
procedure InitializeObjectAttributes(pAttributes: POBJECT_ATTRIBUTES; n: PUNICODE_STRING;
a: Cardinal; r: THANDLE; s: pointer);
begin
pAttributes^.Length := SizeOf(TOBJECT_ATTRIBUTES);
pAttributes^.RootDirectory := r;
pAttributes^.Attributes := a;
pAttributes^.ObjectName := n;
pAttributes^.SecurityDescriptor := s;
pAttributes^.SecurityQualityOfService := nil;
end;
procedure TForm1.Button1Click(Sender: TObject);
var
at:UNICODE_STRING;
oa:TOBJECT_ATTRIBUTES;
begin
RtlInitUnicodeString(at,'\??\d:\1.sys');
InitializeObjectAttributes(@oa,@at,OBJ_CASE_INSENSITIVE,0,0);
ZwDeleteFile(@oa);
end; 相关阅读 >>
Delphi readprocessmemory 输入进程id 输入读取地址
Delphi 解决timage无法在窗体resize时改变canvas的大小
更多相关阅读请进入《Delphi》频道 >>
