FILE_NAMES_INFORMATION - NtDoc
Native API online documentation, based on the System Informer
(formerly Process Hacker) phnt
headers
#ifndef _NTIOAPI_H
typedef struct _FILE_NAMES_INFORMATION
{
ULONG NextEntryOffset;
ULONG FileIndex;
ULONG FileNameLength;
_Field_size_bytes_(FileNameLength) WCHAR FileName[1];
} FILE_NAMES_INFORMATION, *PFILE_NAMES_INFORMATION;
View code on GitHub// ntifs.h
typedef struct _FILE_NAMES_INFORMATION {
ULONG NextEntryOffset;
ULONG FileIndex;
ULONG FileNameLength;
WCHAR FileName[1];
} FILE_NAMES_INFORMATION, *PFILE_NAMES_INFORMATION;
View the official Windows Driver Kit DDI referenceNo description available.
A FILE_NAMES_INFORMATION structure used to query detailed information about the names of files in a directory.
NextEntryOffsetByte offset for the next FILE_NAMES_INFORMATION entry, if multiple entries are present in a buffer. This member is zero if no other entries follow this one.
FileIndexByte offset of the file within the parent directory. This member is undefined for file systems, such as NTFS, in which the position of a file within the parent directory is not fixed and can be changed at any time to maintain sort order.
FileNameLengthLength of the file name string.
FileNameThe first character of the file name string. This is followed in memory by the remainder of the string.
This information can be queried in either of the following ways:
Call ZwQueryDirectoryFile, passing FileNamesInformation as the value of FileInformationClass and passing a caller-allocated, FILE_NAMES_INFORMATION-structured buffer as the value of FileInformation.
Create an IRP with major function code IRP_MJ_DIRECTORY_CONTROL and minor function code IRP_MN_QUERY_DIRECTORY.
No specific access rights are required to query this information.
This structure must be aligned on a LONG (4-byte) boundary. If a buffer contains two or more of these structures, the NextEntryOffset value in each entry, except the last, falls on a 4-byte boundary.
FsRtlNotifyFullChangeDirectory
This structure is documented in Windows Driver Kit.
Structure FILE_NAMES_INFORMATION is used as a result of call NtQueryDirectoryFile with FileNamesInformation information class. It's shorter then other directory informational structures, so can be used for better performance, when only file names are required.
Offset (in bytes) of next FILE_NAMES_INFORMATION entry, or zero if last.
Index of file, or zero if Directory Indexing is disabled.
Length of FileName array, in bytes.
Name of file, in UNICODE format.