Undocumented functions of NTDLL

2OO1, 2O January



FILE_FS_VOLUME_INFORMATION
FILE_FS_VOLUME_INFORMATION

typedef struct _FILE_FS_VOLUME_INFORMATION {


  LARGE_INTEGER           VolumeCreationTime;
  ULONG                   VolumeSerialNumber;
  ULONG                   VolumeLabelLength;
  BOOLEAN                 SupportsObjects;
  WCHAR                   VolumeLabel[1];


} FILE_FS_VOLUME_INFORMATION, *PFILE_FS_VOLUME_INFORMATION;



Structure provides basic information about volume. It's filled in a result of call NtQueryVolumeInformationFile with FileFsVolumeInformation class.


  • VolumeCreationTime
    •     It means time of last Volume Formating Process.
  • VolumeSerialNumber
    •     Serial number of volume, associated in Volume Formating Process.
  • VolumeLabelLength
    •     Length of VolumeLabel array, in bytes.
  • SupportsObjects
    •     If TRUE, Object Files can be stored on specified volume.
  • VolumeLabel[1]
    •     Name of volume. Can be set with FileFsLabelInformation.


    Documented by:
    Bo Branten
    Tomasz Nowak



    Requirements:
    Library: ntdll.lib


    See also:
    FILE_FS_LABEL_INFORMATION
    FS_INFORMATION_CLASS
    NtQueryVolumeInformationFile