怎样判断哪一次IRP_CREATE中的FileObject才是与该文件对应的FileObject呢?谢谢!
回复(2) 2007-05-30 23:12 来自版块 - 文件系统(过滤)驱动程序开发
表情
michaelgzAll of them are valid FileObjects. You need to know that there is no one-to-one relationship between user-mode behavior and kernel-mode ope...(2007-05-31 03:19)
chrysanth每一次都是吧(2007-05-31 02:49)

返回顶部