diff --git a/src/windows-emulator/emulator_utils.hpp b/src/windows-emulator/emulator_utils.hpp
index 805f1a3c..bfa448a3 100644
--- a/src/windows-emulator/emulator_utils.hpp
+++ b/src/windows-emulator/emulator_utils.hpp
@@ -130,6 +130,11 @@ public:
 		buffer.read(this->address_);
 	}
 
+	void set_address(const uint64_t address)
+	{
+		this->address_ = address;
+	}
+
 private:
 	emulator* emu_{};
 	uint64_t address_{};
diff --git a/src/windows-emulator/process_context.hpp b/src/windows-emulator/process_context.hpp
index 97269c94..e850f703 100644
--- a/src/windows-emulator/process_context.hpp
+++ b/src/windows-emulator/process_context.hpp
@@ -140,20 +140,66 @@ struct mutant : ref_counted_object
 	}
 };
 
+struct file_entry
+{
+	std::filesystem::path file_path{};
+
+	void serialize(utils::buffer_serializer& buffer) const
+	{
+		buffer.write(this->file_path);
+	}
+
+	void deserialize(utils::buffer_deserializer& buffer)
+	{
+		buffer.read(this->file_path);
+	}
+};
+
+struct file_enumeration_state
+{
+	size_t current_index{0};
+	std::vector<file_entry> files{};
+
+	void serialize(utils::buffer_serializer& buffer) const
+	{
+		buffer.write(this->current_index);
+		buffer.write_vector(this->files);
+	}
+
+	void deserialize(utils::buffer_deserializer& buffer)
+	{
+		buffer.read(this->current_index);
+		buffer.read_vector(this->files);
+	}
+};
+
 struct file
 {
 	utils::file_handle handle{};
 	std::wstring name{};
+	std::optional<file_enumeration_state> enumeration_state{};
+
+	bool is_file() const
+	{
+		return this->handle;
+	}
+
+	bool is_directory() const
+	{
+		return !this->is_file();
+	}
 
 	void serialize(utils::buffer_serializer& buffer) const
 	{
-		buffer.write(this->name);
 		// TODO: Serialize handle
+		buffer.write(this->name);
+		buffer.write_optional(this->enumeration_state);
 	}
 
 	void deserialize(utils::buffer_deserializer& buffer)
 	{
 		buffer.read(this->name);
+		buffer.read_optional(this->enumeration_state);
 		this->handle = {};
 	}
 };
diff --git a/src/windows-emulator/syscalls.cpp b/src/windows-emulator/syscalls.cpp
index 7d8e9075..c821ff34 100644
--- a/src/windows-emulator/syscalls.cpp
+++ b/src/windows-emulator/syscalls.cpp
@@ -1420,6 +1420,118 @@ namespace
 		return STATUS_NOT_SUPPORTED;
 	}
 
+	std::vector<file_entry> scan_directory(const std::filesystem::path& dir)
+	{
+		std::vector<file_entry> files{};
+
+		for (const auto& file : std::filesystem::directory_iterator(dir))
+		{
+			files.emplace_back(file.path());
+		}
+
+		return files;
+	}
+
+	NTSTATUS handle_NtQueryDirectoryFileEx(const syscall_context& c, const handle file_handle,
+	                                       const handle /*event_handle*/,
+	                                       const emulator_pointer /*PIO_APC_ROUTINE*/ /*apc_routine*/,
+	                                       const emulator_pointer /*apc_context*/,
+	                                       const emulator_object<IO_STATUS_BLOCK> io_status_block,
+	                                       const uint64_t file_information, const uint32_t length,
+	                                       const uint32_t info_class, const ULONG query_flags,
+	                                       const emulator_object<UNICODE_STRING> /*file_name*/)
+	{
+		auto* f = c.proc.files.get(file_handle);
+		if (!f || !f->is_directory())
+		{
+			return STATUS_INVALID_HANDLE;
+		}
+
+		if (!f->enumeration_state || query_flags & SL_RESTART_SCAN)
+		{
+			f->enumeration_state.emplace(file_enumeration_state{});
+			f->enumeration_state->files = scan_directory(f->name);
+		}
+
+		auto& enum_state = *f->enumeration_state;
+
+		if (info_class == FileFullDirectoryInformation)
+		{
+			size_t current_offset{0};
+			emulator_object<FILE_FULL_DIR_INFORMATION> object{c.emu};
+
+			size_t current_index = enum_state.current_index;
+
+			do
+			{
+				if (current_index >= enum_state.files.size())
+				{
+					break;
+				}
+
+				const auto new_offset = align_up(current_offset, 8);
+				const auto& current_file = enum_state.files[current_index];
+				const auto file_name = current_file.file_path.u16string();
+				const auto required_size = sizeof(FILE_FULL_DIR_INFORMATION) + (file_name.size() * 2) - 2;
+				const auto end_offset = new_offset + required_size;
+
+				if (end_offset > length)
+				{
+					if (current_offset == 0)
+					{
+						IO_STATUS_BLOCK block{};
+						block.Information = end_offset;
+						io_status_block.write(block);
+
+						return STATUS_BUFFER_OVERFLOW;
+					}
+
+					break;
+				}
+
+				if (object)
+				{
+					object.access([&](FILE_FULL_DIR_INFORMATION& dir_info)
+					{
+						dir_info.NextEntryOffset = static_cast<ULONG>(new_offset);
+					});
+				}
+
+				FILE_FULL_DIR_INFORMATION info{};
+				info.NextEntryOffset = 0;
+				info.FileIndex = static_cast<ULONG>(current_index);
+				info.FileAttributes = FILE_ATTRIBUTE_NORMAL;
+				info.FileNameLength = static_cast<ULONG>(file_name.size() * 2);
+
+				object.set_address(file_information + new_offset);
+				object.write(info);
+
+				c.emu.write_memory(object.value() + offsetof(FILE_FULL_DIR_INFORMATION, FileName), file_name.data(),
+				                   info.FileNameLength);
+
+				++current_index;
+				current_offset = end_offset;
+			}
+			while ((query_flags & SL_RETURN_SINGLE_ENTRY) == 0);
+
+			if ((query_flags & SL_NO_CURSOR_UPDATE) == 0)
+			{
+				f->enumeration_state->current_index = current_index;
+			}
+
+			IO_STATUS_BLOCK block{};
+			block.Information = current_offset;
+			io_status_block.write(block);
+
+			return current_index < enum_state.files.size() ? STATUS_SUCCESS : STATUS_NO_MORE_FILES;
+		}
+
+		printf("Unsupported query directory file info class: %X\n", info_class);
+		c.emu.stop();
+
+		return STATUS_NOT_SUPPORTED;
+	}
+
 	NTSTATUS handle_NtQueryInformationFile(const syscall_context& c, const handle file_handle,
 	                                       const emulator_object<IO_STATUS_BLOCK> io_status_block,
 	                                       const uint64_t file_information, const uint32_t length,
@@ -1473,7 +1585,7 @@ namespace
 
 			const emulator_object<FILE_STANDARD_INFORMATION> info{c.emu, file_information};
 			FILE_STANDARD_INFORMATION i{};
-			i.Directory = f->handle ? FALSE : TRUE;
+			i.Directory = f->is_directory() ? TRUE : FALSE;
 
 			if (f->handle)
 			{
@@ -3279,6 +3391,7 @@ void syscall_dispatcher::add_handlers(std::map<std::string, syscall_handler>& ha
 	add_handler(NtQueryTimerResolution);
 	add_handler(NtSetInformationKey);
 	add_handler(NtUserGetKeyboardLayout);
+	add_handler(NtQueryDirectoryFileEx);
 
 #undef add_handler
 }