Недокументированные функции NTDLL

17 января 2001

NTSYSAPI 
NTSTATUS
NTAPI
NtQueryDirectoryFile(

  IN HANDLE               FileHandle,
  IN HANDLE               Event OPTIONAL,
  IN PIO_APC_ROUTINE      ApcRoutine OPTIONAL,
  IN PVOID                ApcContext OPTIONAL,
  OUT PIO_STATUS_BLOCK    IoStatusBlock,
  OUT PVOID               FileInformation,
  IN ULONG                Length,
  IN FILE_INFORMATION_CLASS FileInformationClass,
  IN BOOLEAN              ReturnSingleEntry,
  IN PUNICODE_STRING      FileMask OPTIONAL,
  IN BOOLEAN              RestartScan );

FileHandle

Event

ApcRoutine

ApcContext

IoStatusBlock

• STATUS_SUCCESS - Enumeration has results in FileInformation buffer.
• STATUS_NO_MORE_FILES - FileInformation buffer is empty, and next call isn't needed.
• STATUS_NO_SUCH_FILE - Returned when FileMask parameter specify exactly one file (don't contains '*' or '?' characters), and queried directory don't contains that file.

FileInformation

Length

FileInformationClass

• FileDirectoryInformation
• FileFullDirectoryInformation
• FileBothDirectoryInformation
• FileNamesInformation
• FileOleDirectoryInformation

ReturnSingleEntry

FileMask

RestartScan