NtQueryInformationFile - NtDoc

Native API online documentation, based on the System Informer (formerly Process Hacker) phnt headers
#ifndef _NTIOAPI_H

NTSYSCALLAPI
NTSTATUS
NTAPI
NtQueryInformationFile(
    _In_ HANDLE FileHandle,
    _Out_ PIO_STATUS_BLOCK IoStatusBlock,
    _Out_writes_bytes_(Length) PVOID FileInformation,
    _In_ ULONG Length,
    _In_ FILE_INFORMATION_CLASS FileInformationClass
    );

#endif

View code on GitHub
#ifndef _NTZWAPI_H

NTSYSCALLAPI
NTSTATUS
NTAPI
ZwQueryInformationFile(
    _In_ HANDLE FileHandle,
    _Out_ PIO_STATUS_BLOCK IoStatusBlock,
    _Out_writes_bytes_(Length) PVOID FileInformation,
    _In_ ULONG Length,
    _In_ FILE_INFORMATION_CLASS FileInformationClass
    );

#endif

View code on GitHub

This function is documented in Windows Driver Kit here and here.


(Also available in Microsoft 2000 DDK)

FileHandle

HANDLE to File Object.

IoStatusBlock

Completion status of call.

FileInformation

Caller's allocated buffer for result data.

Length

Length of FileInformation buffer, in bytes.

FileInformationClass

Enumerated information class. See FILE_INFORMATION_CLASS for detailed information about usage.

Documented by

See also