#ifndef _NTIOAPI_H
NTSYSCALLAPI
NTSTATUS
NTAPI
NtQueryVolumeInformationFile(
_In_ HANDLE FileHandle,
_Out_ PIO_STATUS_BLOCK IoStatusBlock,
_Out_writes_bytes_(Length) PVOID FsInformation,
_In_ ULONG Length,
_In_ FSINFOCLASS FsInformationClass
);
View code on GitHub
#ifndef _NTZWAPI_H
NTSYSCALLAPI
NTSTATUS
NTAPI
ZwQueryVolumeInformationFile(
_In_ HANDLE FileHandle,
_Out_ PIO_STATUS_BLOCK IoStatusBlock,
_Out_writes_bytes_(Length) PVOID FsInformation,
_In_ ULONG Length,
_In_ FSINFOCLASS FsInformationClass
);
View code on GitHub
This function is documented in Windows Driver Kit here, here, and here.
HANDLE
to File Object.
IO result of call.
Caller's allocated buffer for output data.
Length of FileSystemInformation
buffer, in bytes.
Information class described in FS_INFORMATION_CLASS
topic.
NtQueryVolumeInformationFile
gives information about volume (device) containing file specified as FileHandle
parameter.