| 1 |
|
|---|
| 2 | #include <stdio.h>
|
|---|
| 3 | #include <Windows.h>
|
|---|
| 4 |
|
|---|
| 5 | typedef enum _FILE_INFORMATION_CLASS {
|
|---|
| 6 | FileDirectoryInformation = 1,
|
|---|
| 7 | FileFullDirectoryInformation, // 2
|
|---|
| 8 | FileBothDirectoryInformation, // 3
|
|---|
| 9 | FileBasicInformation, // 4 wdm
|
|---|
| 10 | FileStandardInformation, // 5 wdm
|
|---|
| 11 | FileInternalInformation, // 6
|
|---|
| 12 | FileEaInformation, // 7
|
|---|
| 13 | FileAccessInformation, // 8
|
|---|
| 14 | FileNameInformation, // 9
|
|---|
| 15 | FileRenameInformation, // 10
|
|---|
| 16 | FileLinkInformation, // 11
|
|---|
| 17 | FileNamesInformation, // 12
|
|---|
| 18 | FileDispositionInformation, // 13
|
|---|
| 19 | FilePositionInformation, // 14 wdm
|
|---|
| 20 | FileFullEaInformation, // 15
|
|---|
| 21 | FileModeInformation, // 16
|
|---|
| 22 | FileAlignmentInformation, // 17
|
|---|
| 23 | FileAllInformation, // 18
|
|---|
| 24 | FileAllocationInformation, // 19
|
|---|
| 25 | FileEndOfFileInformation, // 20 wdm
|
|---|
| 26 | FileAlternateNameInformation, // 21
|
|---|
| 27 | FileStreamInformation, // 22
|
|---|
| 28 | FilePipeInformation, // 23
|
|---|
| 29 | FilePipeLocalInformation, // 24
|
|---|
| 30 | FilePipeRemoteInformation, // 25
|
|---|
| 31 | FileMailslotQueryInformation, // 26
|
|---|
| 32 | FileMailslotSetInformation, // 27
|
|---|
| 33 | FileCompressionInformation, // 28
|
|---|
| 34 | FileObjectIdInformation, // 29
|
|---|
| 35 | FileCompletionInformation, // 30
|
|---|
| 36 | FileMoveClusterInformation, // 31
|
|---|
| 37 | FileQuotaInformation, // 32
|
|---|
| 38 | FileReparsePointInformation, // 33
|
|---|
| 39 | FileNetworkOpenInformation, // 34
|
|---|
| 40 | FileAttributeTagInformation, // 35
|
|---|
| 41 | FileTrackingInformation, // 36
|
|---|
| 42 | FileIdBothDirectoryInformation, // 37
|
|---|
| 43 | FileIdFullDirectoryInformation, // 38
|
|---|
| 44 | FileMaximumInformation
|
|---|
| 45 | } FILE_INFORMATION_CLASS, *PFILE_INFORMATION_CLASS;
|
|---|
| 46 |
|
|---|
| 47 | typedef struct _FILE_NAME_INFORMATION
|
|---|
| 48 | {
|
|---|
| 49 | ULONG FileNameLength;
|
|---|
| 50 | WCHAR FileName[1];
|
|---|
| 51 | } FILE_NAME_INFORMATION, *PFILE_NAME_INFORMATION;
|
|---|
| 52 |
|
|---|
| 53 | typedef LONG NTSTATUS;
|
|---|
| 54 |
|
|---|
| 55 | typedef struct _IO_STATUS_BLOCK
|
|---|
| 56 | {
|
|---|
| 57 | union
|
|---|
| 58 | {
|
|---|
| 59 | NTSTATUS Status;
|
|---|
| 60 | PVOID Pointer;
|
|---|
| 61 | };
|
|---|
| 62 | ULONG_PTR Information;
|
|---|
| 63 | } IO_STATUS_BLOCK, *PIO_STATUS_BLOCK;
|
|---|
| 64 |
|
|---|
| 65 | NTSYSAPI
|
|---|
| 66 | NTSTATUS
|
|---|
| 67 | NTAPI
|
|---|
| 68 | NtQueryInformationFile(HANDLE FileHandle, PIO_STATUS_BLOCK IoStatusBlock, PVOID FileInformation,
|
|---|
| 69 | ULONG Length, FILE_INFORMATION_CLASS FileInformationClass);
|
|---|
| 70 |
|
|---|
| 71 |
|
|---|
| 72 |
|
|---|
| 73 | int main(int argc, char **argv)
|
|---|
| 74 | {
|
|---|
| 75 | int rc = 0;
|
|---|
| 76 | int i;
|
|---|
| 77 |
|
|---|
| 78 | NTSTATUS (NTAPI *pfnNtQueryInformationFile)(HANDLE FileHandle, PIO_STATUS_BLOCK IoStatusBlock, PVOID FileInformation,
|
|---|
| 79 | ULONG Length, FILE_INFORMATION_CLASS FileInformationClass);
|
|---|
| 80 |
|
|---|
| 81 | pfnNtQueryInformationFile = GetProcAddress(LoadLibrary("ntdll.dll"), "NtQueryInformationFile");
|
|---|
| 82 |
|
|---|
| 83 | for (i = 1; i < argc; i++)
|
|---|
| 84 | {
|
|---|
| 85 | HANDLE hFile = CreateFile(argv[i],
|
|---|
| 86 | GENERIC_READ,
|
|---|
| 87 | FILE_SHARE_READ | FILE_SHARE_WRITE | FILE_SHARE_DELETE,
|
|---|
| 88 | NULL,
|
|---|
| 89 | OPEN_EXISTING,
|
|---|
| 90 | FILE_FLAG_BACKUP_SEMANTICS,
|
|---|
| 91 | NULL);
|
|---|
| 92 | if (hFile)
|
|---|
| 93 | {
|
|---|
| 94 | long rcNt;
|
|---|
| 95 | char abBuf[4096];
|
|---|
| 96 | IO_STATUS_BLOCK Ios;
|
|---|
| 97 |
|
|---|
| 98 | memset(abBuf, 0, sizeof(abBuf));
|
|---|
| 99 | memset(&Ios, 0, sizeof(Ios));
|
|---|
| 100 | rcNt = pfnNtQueryInformationFile(hFile, &Ios, abBuf, sizeof(abBuf), FileNameInformation);
|
|---|
| 101 | if (rcNt >= 0)
|
|---|
| 102 | {
|
|---|
| 103 | PFILE_NAME_INFORMATION pFileNameInfo = (PFILE_NAME_INFORMATION)abBuf;
|
|---|
| 104 | printf("#%d: %s - rcNt=%#x - FileNameInformation:\n"
|
|---|
| 105 | " FileName: %ls\n"
|
|---|
| 106 | " FileNameLength: %lu\n",
|
|---|
| 107 | i, argv[i], rcNt,
|
|---|
| 108 | pFileNameInfo->FileName,
|
|---|
| 109 | pFileNameInfo->FileNameLength
|
|---|
| 110 | );
|
|---|
| 111 | }
|
|---|
| 112 | else
|
|---|
| 113 | printf("#%d: %s - rcNt=%#x - FileNameInformation!\n", i, argv[i], rcNt);
|
|---|
| 114 |
|
|---|
| 115 | CloseHandle(hFile);
|
|---|
| 116 | }
|
|---|
| 117 | else
|
|---|
| 118 | {
|
|---|
| 119 | printf("#%d: %s - open failed, last error %d\n", i, argv[i], GetLastError());
|
|---|
| 120 | rc = 1;
|
|---|
| 121 | }
|
|---|
| 122 | }
|
|---|
| 123 | return rc;
|
|---|
| 124 | }
|
|---|