I found this structure called OBJECT_ATTRIBUTE in one of the nt dll functions..I was curious to know about that structure and I went through its documentation(msdn)…In the OBJECT_ATTRIBUTE structure there is a parameter called PUNICODE_STRING objectName…As per the msdn documentation..it says that the objectName “the name of the object for which a handle is to be opened” which is actually a name or some root directory,am confused with this.Can anybody explain this term “name of the object”(root directory).what it represents.
I found this structure called OBJECT_ATTRIBUTE in one of the nt dll functions..I was
Share
This structure is used by device drivers and other kernel mode code to specify attributes of file objects. When you open a file with the NtOpenFile or IoCreateFile functions, you have to pass an
OBJECT_ATTRIBUTESwith the name of the file.The
ObjectNamemember of the structure is simply a pointer to anUNICODE_STRINGstructure containing the file or directory name.