// my hooked function:
ZwCreateFileHandler(...)
{
  MyRead();
  g_ZwCreateFileOrig(...)
};

void MyRead()
{
	UNICODE_STRING Path1;
	OBJECT_ATTRIBUTES DirectoryAttributes;
	NTSTATUS NtStatus;
	HANDLE hDir;
	IO_STATUS_BLOCK IoStatusBlock;

	DLogStr("\n\nMyRead()");

	RtlInitUnicodeString( &Path1, L"\\??\\C:\\" );

	// Initialize directory name and attributes
	InitializeObjectAttributes(&DirectoryAttributes, &Path1,
							   OBJ_CASE_INSENSITIVE | OBJ_KERNEL_HANDLE, 0, 0);

	NtStatus = g_ZwCreateFileOrig(&hDir, GENERIC_READ | SYNCHRONIZE,
		&DirectoryAttributes, &IoStatusBlock, 0, 0, 
		FILE_SHARE_READ, FILE_OPEN, 
		FILE_DIRECTORY_FILE | FILE_SYNCHRONOUS_IO_NONALERT, 
		0, 0);
	
	DLogStr("\n");
	if (!NT_SUCCESS(NtStatus)) 
	{
		DLogStr("<FONT COLOR=RED> Failed, NtStatus = ");
		DLogHex( NtStatus );
		DLogStr("</FONT>");
	}
	else 
	{
		DLogStr("<FONT COLOR=BLUE>Directory opened successfully, NtStatus = ");
		DLogHex( NtStatus );
		DLogStr("</FONT>");
	}

	if (NtStatus == STATUS_SUCCESS) ZwClose( hDir );
};