#ifndef _NTRTL_H
//
// Cloud Filters
//
#if (PHNT_VERSION >= PHNT_WINDOWS_10_RS3)
// msdn
NTSYSAPI
NTSTATUS
NTAPI
RtlIsPartialPlaceholderFileInfo(
_In_ PVOID InfoBuffer,
_In_ FILE_INFORMATION_CLASS InfoClass,
_Out_ PBOOLEAN IsPartialPlaceholder
);
View code on GitHub// ntifs.h
NTSYSAPI NTSTATUS RtlIsPartialPlaceholderFileInfo(
[in] const VOID *InfoBuffer,
[in] FILE_INFORMATION_CLASS InfoClass,
[out] PBOOLEAN IsPartialPlaceholder
);
View the official Windows Driver Kit DDI referenceThis function is documented in Windows Driver Kit.
The RtlIsPartialPlaceholderFileInfo routine determines if a file is a known type of placeholder, based on the information returned by NtQueryInformationFile or NtQueryDirectoryFile.
InfoBuffer [in]Specifies a pointer to a caller-allocated buffer which contains information about the file object. If this is from a call to NtQueryDirectoryFile, this may point to the first or any subsequent subsequent entry in the buffer (found by walking the buffer).
InfoClass [in]Specifies which File Information class to use to query InfoBuffer.
IsPartialPlaceholder [out]IsPartialPlaceholder is a pointer to a boolean which returns TRUE if the file or directory is a placeholder. It returns FALSE if either the file or directory is not a placeholder or is a full placeholder. Returns undefined on failure.
Returns STATUS_SUCCESS if IsPartialPlaceholder is valid and not undefined.
If InfoBuffer is from a call to NtQueryDirectoryFile, this may point to the first or any subsequent subsequent entry in the buffer which is found by walking the buffer.