Process Manager Functions

Module Description

_NtQueryInformationProcess et cetera...

Functions
_NTFN_EXTERN NTSTATUS	_NtQueryInformationProcess (IN HANDLE ProcessHandle, IN PROCESSINFOCLASS ProcessInformationClass, OUT PVOID ProcessInformation, IN ULONG ProcessInformationLength, OPTOUT PULONG ReturnLength)
_NTFN_EXTERN NTSTATUS	_NtQueryInformationThread (IN HANDLE ThreadHandle, IN THREADINFOCLASS ThreadInformationClass, OUT PVOID ThreadInformation, IN ULONG ThreadInformationLength, OPTOUT PULONG ReturnLength)
_NTFN_EXTERN NTSTATUS	_NtQueryInformationJobObject (IN HANDLE JobHandle, IN JOBOBJECTINFOCLASS JobInformationClass, OUT PVOID JobInformation, IN ULONG JobInformationLength, OUT PULONG ReturnLength)
_NTFN_EXTERN NTSTATUS	_NtCreateProcess (OUT PHANDLE ProcessHandle, IN ACCESS_MASK DesiredAccess, OPTIN POBJECT_ATTRIBUTES ObjectAttributes, IN HANDLE ParentProcess, IN BOOLEAN InheritObjectTable, OPTIN HANDLE SectionHandle, OPTIN HANDLE DebugPort, OPTIN HANDLE ExceptionPort)
_NTFN_EXTERN NTSTATUS	_NtCreateProcessEx (OUT PHANDLE ProcessHandle, IN ACCESS_MASK DesiredAccess, OPTIN POBJECT_ATTRIBUTES ObjectAttributes, IN HANDLE ParentProcess, IN ULONG Flags, OPTIN HANDLE SectionHandle, OPTIN HANDLE DebugPort, OPTIN HANDLE ExceptionPort, IN BOOLEAN InJob)
_NTFN_EXTERN NTSTATUS	_NtOpenProcess (OUT PHANDLE ProcessHandle, IN ACCESS_MASK DesiredAccess, IN POBJECT_ATTRIBUTES ObjectAttributes, OPTIN PCLIENT_ID ClientId)
_NTFN_EXTERN NTSTATUS	_NtCreateThread (OUT PHANDLE ThreadHandle, IN ACCESS_MASK DesiredAccess, OPTIN POBJECT_ATTRIBUTES ObjectAttributes, IN HANDLE ProcessHandle, OUT PCLIENT_ID ClientId, IN PCONTEXT ThreadContext, IN PINITIAL_TEB UserStack, IN BOOLEAN CreateSuspended)
_NTFN_EXTERN NTSTATUS	_NtOpenThread (OUT PHANDLE ThreadHandle, IN ACCESS_MASK DesiredAccess, IN POBJECT_ATTRIBUTES ObjectAttributes, IN PCLIENT_ID ClientId)
_NTFN_EXTERN NTSTATUS	_NtAlertThread (IN HANDLE ThreadHandle)
_NTFN_EXTERN NTSTATUS	_NtAlertResumeThread (IN HANDLE ThreadHandle, OPTOUT PULONG SuspendCount)
_NTFN_EXTERN PTEB	_NtCurrentTeb (void)
_NTFN_EXTERN NTSTATUS	_NtImpersonateThread (IN HANDLE ThreadHandle, IN HANDLE ThreadToImpersonate, IN PSECURITY_QUALITY_OF_SERVICE SecurityQualityOfService)
_NTFN_EXTERN NTSTATUS	_NtCreateJobObject (OUT PHANDLE JobHandle, IN ACCESS_MASK DesiredAccess, IN POBJECT_ATTRIBUTES ObjectAttributes)
_NTFN_EXTERN NTSTATUS	_NtOpenJobObject (OUT PHANDLE JobHandle, IN ACCESS_MASK DesiredAccess, IN POBJECT_ATTRIBUTES ObjectAttributes)
_NTFN_EXTERN NTSTATUS	_NtCreateJobSet (IN ULONG NumJob, IN PJOB_SET_ARRAY UserJobSet, IN ULONG Flags)
_NTFN_EXTERN NTSTATUS	_NtAssignProcessToJobObject (IN HANDLE JobHandle, IN HANDLE ProcessHandle)
_NTFN_EXTERN NTSTATUS	_NtIsProcessInJob (IN HANDLE ProcessHandle, OPTIN HANDLE JobHandle)
_NTFN_EXTERN NTSTATUS	_NtApphelpCacheControl (IN APPHELPCACHESERVICECLASS Service, OPTIN PAPPHELP_CACHE_SERVICE_LOOKUP ServiceData)

Function Documentation

_NtQueryInformationProcess()

_NTFN_EXTERN NTSTATUS _NtQueryInformationProcess	(	IN HANDLE	ProcessHandle,
		IN PROCESSINFOCLASS	ProcessInformationClass,
		OUT PVOID	ProcessInformation,
		IN ULONG	ProcessInformationLength,
		OPTOUT PULONG	ReturnLength
	)

_NtQueryInformationThread()

_NTFN_EXTERN NTSTATUS _NtQueryInformationThread	(	IN HANDLE	ThreadHandle,
		IN THREADINFOCLASS	ThreadInformationClass,
		OUT PVOID	ThreadInformation,
		IN ULONG	ThreadInformationLength,
		OPTOUT PULONG	ReturnLength
	)

_NtQueryInformationJobObject()

_NTFN_EXTERN NTSTATUS _NtQueryInformationJobObject	(	IN HANDLE	JobHandle,
		IN JOBOBJECTINFOCLASS	JobInformationClass,
		OUT PVOID	JobInformation,
		IN ULONG	JobInformationLength,
		OUT PULONG	ReturnLength
	)

_NtCreateProcess()

_NTFN_EXTERN NTSTATUS _NtCreateProcess	(	OUT PHANDLE	ProcessHandle,
		IN ACCESS_MASK	DesiredAccess,
		OPTIN POBJECT_ATTRIBUTES	ObjectAttributes,
		IN HANDLE	ParentProcess,
		IN BOOLEAN	InheritObjectTable,
		OPTIN HANDLE	SectionHandle,
		OPTIN HANDLE	DebugPort,
		OPTIN HANDLE	ExceptionPort
	)

_NtCreateProcessEx()

_NTFN_EXTERN NTSTATUS _NtCreateProcessEx	(	OUT PHANDLE	ProcessHandle,
		IN ACCESS_MASK	DesiredAccess,
		OPTIN POBJECT_ATTRIBUTES	ObjectAttributes,
		IN HANDLE	ParentProcess,
		IN ULONG	Flags,
		OPTIN HANDLE	SectionHandle,
		OPTIN HANDLE	DebugPort,
		OPTIN HANDLE	ExceptionPort,
		IN BOOLEAN	InJob
	)

_NtOpenProcess()

_NTFN_EXTERN NTSTATUS _NtOpenProcess	(	OUT PHANDLE	ProcessHandle,
		IN ACCESS_MASK	DesiredAccess,
		IN POBJECT_ATTRIBUTES	ObjectAttributes,
		OPTIN PCLIENT_ID	ClientId
	)

_NtCreateThread()

_NTFN_EXTERN NTSTATUS _NtCreateThread	(	OUT PHANDLE	ThreadHandle,
		IN ACCESS_MASK	DesiredAccess,
		OPTIN POBJECT_ATTRIBUTES	ObjectAttributes,
		IN HANDLE	ProcessHandle,
		OUT PCLIENT_ID	ClientId,
		IN PCONTEXT	ThreadContext,
		IN PINITIAL_TEB	UserStack,
		IN BOOLEAN	CreateSuspended
	)

_NtOpenThread()

_NTFN_EXTERN NTSTATUS _NtOpenThread	(	OUT PHANDLE	ThreadHandle,
		IN ACCESS_MASK	DesiredAccess,
		IN POBJECT_ATTRIBUTES	ObjectAttributes,
		IN PCLIENT_ID	ClientId
	)

_NtAlertThread()

_NTFN_EXTERN NTSTATUS _NtAlertThread

(

IN HANDLE

ThreadHandle

)

_NtAlertResumeThread()

_NTFN_EXTERN NTSTATUS _NtAlertResumeThread	(	IN HANDLE	ThreadHandle,
		OPTOUT PULONG	SuspendCount
	)

_NtCurrentTeb()

_NTFN_EXTERN PTEB _NtCurrentTeb

(

void

)

_NtImpersonateThread()

_NTFN_EXTERN NTSTATUS _NtImpersonateThread	(	IN HANDLE	ThreadHandle,
		IN HANDLE	ThreadToImpersonate,
		IN PSECURITY_QUALITY_OF_SERVICE	SecurityQualityOfService
	)

_NtCreateJobObject()

_NTFN_EXTERN NTSTATUS _NtCreateJobObject	(	OUT PHANDLE	JobHandle,
		IN ACCESS_MASK	DesiredAccess,
		IN POBJECT_ATTRIBUTES	ObjectAttributes
	)

_NtOpenJobObject()

_NTFN_EXTERN NTSTATUS _NtOpenJobObject	(	OUT PHANDLE	JobHandle,
		IN ACCESS_MASK	DesiredAccess,
		IN POBJECT_ATTRIBUTES	ObjectAttributes
	)

_NtCreateJobSet()

_NTFN_EXTERN NTSTATUS _NtCreateJobSet	(	IN ULONG	NumJob,
		IN PJOB_SET_ARRAY	UserJobSet,
		IN ULONG	Flags
	)

_NtAssignProcessToJobObject()

_NTFN_EXTERN NTSTATUS _NtAssignProcessToJobObject	(	IN HANDLE	JobHandle,
		IN HANDLE	ProcessHandle
	)

_NtIsProcessInJob()

_NTFN_EXTERN NTSTATUS _NtIsProcessInJob	(	IN HANDLE	ProcessHandle,
		OPTIN HANDLE	JobHandle
	)

_NtApphelpCacheControl()

_NTFN_EXTERN NTSTATUS _NtApphelpCacheControl	(	IN APPHELPCACHESERVICECLASS	Service,
		OPTIN PAPPHELP_CACHE_SERVICE_LOOKUP	ServiceData
	)