Process Monitor将CreateFile操作的处置选项显示为“Open”,“OpenIf”,“Overwrite”,“OverwriteIf”(可能是其他内容).包含“If”的选项与不包含的选项有何不同?它们对应于哪个
CreateFile WinAPI函数’dwCreationDisposition’标志?
| CreateFile | NtCreateFile | Process Monitor | | dwCreationDisposition | CreateDisposition | Disposition | |-----------------------|-----------------------|-----------------| | n/a | FILE_SUPERSEDE (0) | Supersede (?) | | OPEN_EXISTING (3) | FILE_OPEN (1) | Open | | TRUNCATE_EXISTING (5) | FILE_OPEN (1) | Open | | CREATE_NEW (1) | FILE_CREATE (2) | Create | | OPEN_ALWAYS (4) | FILE_OPEN_IF (3) | OpenIf | | n/a | FILE_OVERWRITE (4) | Overwrite (?) | | CREATE_ALWAYS (2) | FILE_OVERWRITE_IF (5) | OverwriteIf |