Is QueryStandardFileInformation involved in CreatingSymboliclink??

Question

hello all,I am tracking the function calls of CreateSymbolicLink API using ProcMonitor...I noticed that createsymbolic calls zwcreatefile API and querystandardinformationfile.I confirmed that Zwcreatefile is only responsible for creating the file,but am not sure wether linking the target path is done by querystandardinformationfile.What does the function querystandardinformationfile do??can anybody help me with this?

 

---

_Pete_Pan_

Answer 1

Hi _PeterPan_,

Based on my understanding, to create a link, we need to know the information of the linked object at first and then create a link file. I think querystandardinformationfile is used to get the information of the linked object(a file or a directory, directory can be considered as a special file).

Regards,
Aland Li

---

Please mark the replies as answers if they help and unmark if they don't. This can be beneficial to other community members reading the thread.