The RtlIsPartialPlaceholderFileInfo routine determines if a file is a known type of placeholder, based on the information returned by NtQueryInformationFile or NtQueryDirectoryFile.
NTSYSAPI NTSTATUS RtlIsPartialPlaceholderFileInfo( CONST VOID *InfoBuffer, FILE_INFORMATION_CLASS InfoClass, PBOOLEAN IsPartialPlaceholder );
Specifies a pointer to a caller-allocated buffer which contains information about the file object. If this is from a call to NtQueryDirectoryFile, this may point to the first or any subsequent subsequent entry in the buffer (found by walking the buffer).
Specifies which File Information class to use to query InfoBuffer.
IsPartialPlaceholder is a pointer to a boolean which returns TRUE if the file or directory is a placeholder. It returns FALSE if either the file or directory is not a placeholder or is a full placeholder. Returns undefined on failure.
Returns STATUS_SUCCESS if IsPartialPlaceholder is valid and not undefined.
If InfoBuffer is from a call to NtQueryDirectoryFile, this may point to the first or any subsequent subsequent entry in the buffer which is found by walking the buffer.
|Windows version||Available starting with Windows 10, version 1709.|
|Header||ntifs.h (include Ntifs.h)|