I found this structure called OBJECT_ATTRIBUTE in one of the nt dll functions..I was curious to know about that structure and I went through its documentation(msdn)...In the OBJECT_ATTRIBUTE structure there is a parameter called PUNICODE_STRING objectName...As per the msdn documentation..it says that the objectName "the name of the object for which a handle is to be opened" which is actually a name or some root directory,am confused with this.Can anybody explain this term "name of the obje开发者_Python百科ct"(root directory).what it represents.
This structure is used by device drivers and other kernel mode code to specify attributes of file objects. When you open a file with the NtOpenFile or IoCreateFile functions, you have to pass an OBJECT_ATTRIBUTES
with the name of the file.
The ObjectName
member of the structure is simply a pointer to an UNICODE_STRING
structure containing the file or directory name.
精彩评论