Win32 API 日本語リファレンス
ホーム › System.Ioctl › USN_RECORD_V4

USN_RECORD_V4

構造体
📘 Microsoft Learn (日本語) · English
サイズx64: 80 バイト / x86: 80 バイト

サイズ=各フィールドのバイト数(x64/x86 で異なる場合は x64/x86 と併記)。x64/x86 列=フィールドのバイトオフセット(HSPで dupptr / lpoke / wpoke 等に使用)。

フィールド

フィールド型サイズx64x86説明
HeaderUSN_RECORD_COMMON_HEADER8+0+0共通ヘッダ。USN_RECORD_COMMON_HEADER構造体。
FileReferenceNumberFILE_ID_12816+8+8レコード対象ファイルの128ビットファイル参照番号。
ParentFileReferenceNumberFILE_ID_12816+24+24親ディレクトリの128ビットファイル参照番号。
UsnLONGLONG8+40+40このレコードのUSN(更新シーケンス番号)。
ReasonDWORD4+48+48ファイルに加えられた変更の理由を示すフラグのビットマスク。
SourceInfoUSN_SOURCE_INFO_ID4+52+52変更の発生元情報を示す識別子。
RemainingExtentsDWORD4+56+56このレコードに続いて残るエクステントの数。
NumberOfExtentsWORD2+60+60Extents配列に含まれるエクステントの数。
ExtentSizeWORD2+62+62各エクステント要素のバイトサイズ。
ExtentsUSN_RECORD_EXTENT16+64+64変更範囲を示すUSN_RECORD_EXTENT配列。先頭要素。

各言語での定義

#include <windows.h>

// USN_RECORD_COMMON_HEADER  (x64 8 / x86 8 バイト)
typedef struct USN_RECORD_COMMON_HEADER {
    DWORD RecordLength;
    WORD MajorVersion;
    WORD MinorVersion;
} USN_RECORD_COMMON_HEADER;

// FILE_ID_128  (x64 16 / x86 16 バイト)
typedef struct FILE_ID_128 {
    BYTE Identifier[16];
} FILE_ID_128;

// USN_RECORD_EXTENT  (x64 16 / x86 16 バイト)
typedef struct USN_RECORD_EXTENT {
    LONGLONG Offset;
    LONGLONG Length;
} USN_RECORD_EXTENT;

// USN_RECORD_V4  (x64 80 / x86 80 バイト)
typedef struct USN_RECORD_V4 {
    USN_RECORD_COMMON_HEADER Header;
    FILE_ID_128 FileReferenceNumber;
    FILE_ID_128 ParentFileReferenceNumber;
    LONGLONG Usn;
    DWORD Reason;
    USN_SOURCE_INFO_ID SourceInfo;
    DWORD RemainingExtents;
    WORD NumberOfExtents;
    WORD ExtentSize;
    USN_RECORD_EXTENT Extents[1];
} USN_RECORD_V4;
using System;
using System.Runtime.InteropServices;

[StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]
public struct USN_RECORD_COMMON_HEADER
{
    public uint RecordLength;
    public ushort MajorVersion;
    public ushort MinorVersion;
}

[StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]
public struct FILE_ID_128
{
    [MarshalAs(UnmanagedType.ByValArray, SizeConst = 16)] public byte[] Identifier;
}

[StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]
public struct USN_RECORD_EXTENT
{
    public long Offset;
    public long Length;
}

[StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]
public struct USN_RECORD_V4
{
    public USN_RECORD_COMMON_HEADER Header;
    public FILE_ID_128 FileReferenceNumber;
    public FILE_ID_128 ParentFileReferenceNumber;
    public long Usn;
    public uint Reason;
    public uint SourceInfo;
    public uint RemainingExtents;
    public ushort NumberOfExtents;
    public ushort ExtentSize;
    [MarshalAs(UnmanagedType.ByValArray, SizeConst = 1)] public USN_RECORD_EXTENT[] Extents;
}
Imports System.Runtime.InteropServices

<StructLayout(LayoutKind.Sequential, CharSet:=CharSet.Unicode)>
Public Structure USN_RECORD_COMMON_HEADER
    Public RecordLength As UInteger
    Public MajorVersion As UShort
    Public MinorVersion As UShort
End Structure

<StructLayout(LayoutKind.Sequential, CharSet:=CharSet.Unicode)>
Public Structure FILE_ID_128
    <MarshalAs(UnmanagedType.ByValArray, SizeConst:=16)> Public Identifier() As Byte
End Structure

<StructLayout(LayoutKind.Sequential, CharSet:=CharSet.Unicode)>
Public Structure USN_RECORD_EXTENT
    Public Offset As Long
    Public Length As Long
End Structure

<StructLayout(LayoutKind.Sequential, CharSet:=CharSet.Unicode)>
Public Structure USN_RECORD_V4
    Public Header As USN_RECORD_COMMON_HEADER
    Public FileReferenceNumber As FILE_ID_128
    Public ParentFileReferenceNumber As FILE_ID_128
    Public Usn As Long
    Public Reason As UInteger
    Public SourceInfo As UInteger
    Public RemainingExtents As UInteger
    Public NumberOfExtents As UShort
    Public ExtentSize As UShort
    <MarshalAs(UnmanagedType.ByValArray, SizeConst:=1)> Public Extents() As USN_RECORD_EXTENT
End Structure
import ctypes
from ctypes import wintypes

class USN_RECORD_COMMON_HEADER(ctypes.Structure):
    _fields_ = [
        ("RecordLength", wintypes.DWORD),
        ("MajorVersion", ctypes.c_ushort),
        ("MinorVersion", ctypes.c_ushort),
    ]

class FILE_ID_128(ctypes.Structure):
    _fields_ = [
        ("Identifier", ctypes.c_ubyte * 16),
    ]

class USN_RECORD_EXTENT(ctypes.Structure):
    _fields_ = [
        ("Offset", ctypes.c_longlong),
        ("Length", ctypes.c_longlong),
    ]

class USN_RECORD_V4(ctypes.Structure):
    _fields_ = [
        ("Header", USN_RECORD_COMMON_HEADER),
        ("FileReferenceNumber", FILE_ID_128),
        ("ParentFileReferenceNumber", FILE_ID_128),
        ("Usn", ctypes.c_longlong),
        ("Reason", wintypes.DWORD),
        ("SourceInfo", wintypes.DWORD),
        ("RemainingExtents", wintypes.DWORD),
        ("NumberOfExtents", ctypes.c_ushort),
        ("ExtentSize", ctypes.c_ushort),
        ("Extents", USN_RECORD_EXTENT * 1),
    ]
#[repr(C)]
pub struct USN_RECORD_COMMON_HEADER {
    pub RecordLength: u32,
    pub MajorVersion: u16,
    pub MinorVersion: u16,
}

#[repr(C)]
pub struct FILE_ID_128 {
    pub Identifier: [u8; 16],
}

#[repr(C)]
pub struct USN_RECORD_EXTENT {
    pub Offset: i64,
    pub Length: i64,
}

#[repr(C)]
pub struct USN_RECORD_V4 {
    pub Header: USN_RECORD_COMMON_HEADER,
    pub FileReferenceNumber: FILE_ID_128,
    pub ParentFileReferenceNumber: FILE_ID_128,
    pub Usn: i64,
    pub Reason: u32,
    pub SourceInfo: u32,
    pub RemainingExtents: u32,
    pub NumberOfExtents: u16,
    pub ExtentSize: u16,
    pub Extents: [USN_RECORD_EXTENT; 1],
}
import "golang.org/x/sys/windows"

type USN_RECORD_COMMON_HEADER struct {
	RecordLength uint32
	MajorVersion uint16
	MinorVersion uint16
}

type FILE_ID_128 struct {
	Identifier [16]byte
}

type USN_RECORD_EXTENT struct {
	Offset int64
	Length int64
}

type USN_RECORD_V4 struct {
	Header USN_RECORD_COMMON_HEADER
	FileReferenceNumber FILE_ID_128
	ParentFileReferenceNumber FILE_ID_128
	Usn int64
	Reason uint32
	SourceInfo uint32
	RemainingExtents uint32
	NumberOfExtents uint16
	ExtentSize uint16
	Extents [1]USN_RECORD_EXTENT
}
type
  USN_RECORD_COMMON_HEADER = record
    RecordLength: DWORD;
    MajorVersion: Word;
    MinorVersion: Word;
  end;

  FILE_ID_128 = record
    Identifier: array[0..15] of Byte;
  end;

  USN_RECORD_EXTENT = record
    Offset: Int64;
    Length: Int64;
  end;

  USN_RECORD_V4 = record
    Header: USN_RECORD_COMMON_HEADER;
    FileReferenceNumber: FILE_ID_128;
    ParentFileReferenceNumber: FILE_ID_128;
    Usn: Int64;
    Reason: DWORD;
    SourceInfo: DWORD;
    RemainingExtents: DWORD;
    NumberOfExtents: Word;
    ExtentSize: Word;
    Extents: array[0..0] of USN_RECORD_EXTENT;
  end;
const USN_RECORD_COMMON_HEADER = extern struct {
    RecordLength: u32,
    MajorVersion: u16,
    MinorVersion: u16,
};

const FILE_ID_128 = extern struct {
    Identifier: [16]u8,
};

const USN_RECORD_EXTENT = extern struct {
    Offset: i64,
    Length: i64,
};

const USN_RECORD_V4 = extern struct {
    Header: USN_RECORD_COMMON_HEADER,
    FileReferenceNumber: FILE_ID_128,
    ParentFileReferenceNumber: FILE_ID_128,
    Usn: i64,
    Reason: u32,
    SourceInfo: u32,
    RemainingExtents: u32,
    NumberOfExtents: u16,
    ExtentSize: u16,
    Extents: [1]USN_RECORD_EXTENT,
};
type
  USN_RECORD_COMMON_HEADER {.bycopy.} = object
    RecordLength: uint32
    MajorVersion: uint16
    MinorVersion: uint16

  FILE_ID_128 {.bycopy.} = object
    Identifier: array[16, uint8]

  USN_RECORD_EXTENT {.bycopy.} = object
    Offset: int64
    Length: int64

  USN_RECORD_V4 {.bycopy.} = object
    Header: USN_RECORD_COMMON_HEADER
    FileReferenceNumber: FILE_ID_128
    ParentFileReferenceNumber: FILE_ID_128
    Usn: int64
    Reason: uint32
    SourceInfo: uint32
    RemainingExtents: uint32
    NumberOfExtents: uint16
    ExtentSize: uint16
    Extents: array[1, USN_RECORD_EXTENT]
struct USN_RECORD_COMMON_HEADER
{
    uint RecordLength;
    ushort MajorVersion;
    ushort MinorVersion;
}

struct FILE_ID_128
{
    ubyte[16] Identifier;
}

struct USN_RECORD_EXTENT
{
    long Offset;
    long Length;
}

struct USN_RECORD_V4
{
    USN_RECORD_COMMON_HEADER Header;
    FILE_ID_128 FileReferenceNumber;
    FILE_ID_128 ParentFileReferenceNumber;
    long Usn;
    uint Reason;
    uint SourceInfo;
    uint RemainingExtents;
    ushort NumberOfExtents;
    ushort ExtentSize;
    USN_RECORD_EXTENT[1] Extents;
}

HSP用 定義

HSP3.7/3.8 は構造体機能が無いため4byte整数配列(dim)+peek/poke で操作(32/64bitでサイズ・位置が異なる場合はタブで分割)。IronHSP は NSTRUCT(#defstruct/stdim/->)で32/64bit共通。

; HSP3.7/3.8 は構造体機能が無いため、4byte整数の配列変数で操作します。(x64 レイアウト)
; USN_RECORD_V4 サイズ: 80 バイト(x64)
dim st, 20    ; 4byte整数×20(構造体サイズ 80 / 4 切り上げ)
; Header : USN_RECORD_COMMON_HEADER (+0, 8byte)  varptr(st)+0 を基点に操作(8byte:入れ子/配列)
; FileReferenceNumber : FILE_ID_128 (+8, 16byte)  varptr(st)+8 を基点に操作(16byte:入れ子/配列)
; ParentFileReferenceNumber : FILE_ID_128 (+24, 16byte)  varptr(st)+24 を基点に操作(16byte:入れ子/配列)
; Usn : LONGLONG (+40, 8byte)  qpoke st,40,値 / qpeek(st,40)  ※IronHSPのみ。3.7/3.8は lpoke st,40,下位 : lpoke st,44,上位
; Reason : DWORD (+48, 4byte)  st.12 = 値  /  値 = st.12   (lpoke/lpeek も可)
; SourceInfo : USN_SOURCE_INFO_ID (+52, 4byte)  st.13 = 値  /  値 = st.13   (lpoke/lpeek も可)
; RemainingExtents : DWORD (+56, 4byte)  st.14 = 値  /  値 = st.14   (lpoke/lpeek も可)
; NumberOfExtents : WORD (+60, 2byte)  wpoke st,60,値  /  値 = wpeek(st,60)
; ExtentSize : WORD (+62, 2byte)  wpoke st,62,値  /  値 = wpeek(st,62)
; Extents : USN_RECORD_EXTENT (+64, 16byte)  varptr(st)+64 を基点に操作(16byte:入れ子/配列)
; ※4byte境界の整数は添字 st.N(N=オフセット/4)で読み書き可。それ以外は peek/poke 系を使用。
; IronHSP は NSTRUCT(構造体)をサポート。32bit/64bit どちらでも同じコードで動作します。
; ※GUID・入れ子構造体はデフォルト型でないため、依存する #defstruct を先に定義(下記に同梱)。
#defstruct global USN_RECORD_COMMON_HEADER
    #field int RecordLength
    #field short MajorVersion
    #field short MinorVersion
#endstruct

#defstruct global FILE_ID_128
    #field byte Identifier 16
#endstruct

#defstruct global USN_RECORD_EXTENT
    #field int64 Offset
    #field int64 Length
#endstruct

#defstruct global USN_RECORD_V4
    #field USN_RECORD_COMMON_HEADER Header
    #field FILE_ID_128 FileReferenceNumber
    #field FILE_ID_128 ParentFileReferenceNumber
    #field int64 Usn
    #field int Reason
    #field int SourceInfo
    #field int RemainingExtents
    #field short NumberOfExtents
    #field short ExtentSize
    #field USN_RECORD_EXTENT Extents 1
#endstruct

stdim st, USN_RECORD_V4        ; NSTRUCT 変数を確保
st->Usn = 100
mes "Usn=" + st->Usn