// ntifs.h
// CTL_CODE(0x0009, 0x00e, METHOD_NEITHER, FILE_ANY_ACCESS)
#define FSCTL_QUERY_RETRIEVAL_POINTERS 0x0009003B
View the official Windows hardware development documentationNo description available.
The FSCTL_QUERY_RETRIEVAL_POINTERS control code retrieves a mapping between virtual cluster numbers (VCN, offsets within the file/stream space) and logical cluster numbers (LCN, offsets within the volume space), starting at the beginning of the file up to the map size specified in InputBuffer.
FSCTL_QUERY_RETRIEVAL_POINTERS is similar to FSCTL_GET_RETRIEVAL_POINTERS. However, FSCTL_QUERY_RETRIEVAL_POINTERS only works in kernel mode on local paging files or the system hives. The paging file is guaranteed to have a one-to-one mapping from the VCN in a volume to the LCN that refer more directly to the underlying physical storage. You must not use FSCTL_QUERY_RETRIEVAL_POINTERS with files other than the page file, because they might reside on volumes, such as mirrored volumes, that have one-to-many mappings of VCNs to LCNs.
To perform this operation, call FltFsControlFile or ZwFsControlFile with the following parameters.
FileObject [in]: FltFsControlFile only. A file object pointer for the paging file or hibernation file. This parameter is required and cannot be NULL.
FileHandle [in]: ZwFsControlFile only. A file handle for the paging file or hibernation file. This parameter is required and cannot be NULL.
FsControlCode [in]: The control code for the operation. Use FSCTL_GET_RETRIEVAL_POINTERS for this operation.
InputBuffer [in]: A user-supplied buffer that contains a pointer to a quadlet that specifies the map size. The map size is the number of clusters to map.
InputBufferLength [in]: Length, in bytes, of the input buffer at InputBuffer.
OutputBuffer [out]: A pointer to a buffer of paged pool memory that contains an array of elements of the following type:
This array of quadlet pairs defines the disk runs of the file. The value of the SectorLengthInBytes member in the last element of the array is zero.
FltFsControlFile and ZwFsControlFile both return STATUS_SUCCESS or an appropriate NTSTATUS error value.
This code is not supported by ReFS.
| Requirement type | Requirement |
|---|---|
| Header | Ntifs.h (include Ntifs.h) |