#ifndef _NTIOAPI_H
/**
* The NtQueryFullAttributesFile function retrieves network open information for the specified file.
*
* \param ObjectAttributes A pointer to an OBJECT_ATTRIBUTES structure that supplies the attributes to be used for the file object.
* \param FileInformation A pointer to a FILE_NETWORK_OPEN_INFORMATION structure that receives the returned file attributes information.
* \return NTSTATUS Successful or errant status.
* \sa https://learn.microsoft.com/en-us/windows-hardware/drivers/ddi/wdm/nf-wdm-zwqueryfullattributesfile
*/
NTSYSCALLAPI
NTSTATUS
NTAPI
NtQueryFullAttributesFile(
_In_ PCOBJECT_ATTRIBUTES ObjectAttributes,
_Out_ PFILE_NETWORK_OPEN_INFORMATION FileInformation
);
View code on GitHub
#ifndef _NTZWAPI_H
NTSYSCALLAPI
NTSTATUS
NTAPI
ZwQueryFullAttributesFile(
_In_ PCOBJECT_ATTRIBUTES ObjectAttributes,
_Out_ PFILE_NETWORK_OPEN_INFORMATION FileInformation
);
View code on GitHub
// wdm.h
NTSYSAPI NTSTATUS ZwQueryFullAttributesFile(
[in] POBJECT_ATTRIBUTES ObjectAttributes,
[out] PFILE_NETWORK_OPEN_INFORMATION FileInformation
);
View the official Windows Driver Kit DDI reference
No description available.
The ZwQueryFullAttributesFile routine supplies network open information for the specified file.
ObjectAttributes
[in]A pointer to an OBJECT_ATTRIBUTES structure that supplies the attributes to be used for the file object.
FileInformation
[out]A pointer to a FILE_NETWORK_OPEN_INFORMATION structure that receives the returned file attributes information.
ZwQueryFullAttributesFile returns STATUS_SUCCESS on success, or the appropriate error status.
Callers of ZwQueryFullAttributesFile must be running at IRQL = PASSIVE_LEVEL and with special kernel APCs enabled.
NtQueryFullAttributesFile and ZwQueryFullAttributesFile are two versions of the same Windows Native System Services routine. The NtQueryFullAttributesFile routine in the Windows kernel is not directly accessible to kernel-mode drivers. However, kernel-mode drivers can access this routine indirectly by calling the ZwQueryFullAttributesFile routine.
For calls from kernel-mode drivers, the Nt*Xxx* and Zw*Xxx* versions of a Windows Native System Services routine can behave differently in the way that they handle and interpret input parameters. For more information about the relationship between the Nt*Xxx* and Zw*Xxx* versions of a routine, see Using Nt and Zw Versions of the Native System Services Routines.
Using Nt and Zw Versions of the Native System Services Routines
This function is documented in Windows Driver Kit.
Function NtQueryFullAttributesFile
is used to get information about file stored on low-speed connection device. See also description of NtQueryAttributesFile
function.
Path and name of File Object to query.
Pointer to FILE_NETWORK_OPEN_INFORMATION
structure.