Object Manager Functions

Module Description

_NtQueryObject et cetera...

Functions
_NTFN_EXTERN NTSTATUS	_NtClose (IN HANDLE Handle)
_NTFN_EXTERN NTSTATUS	_NtDuplicateObject (IN HANDLE SourceProcessHandle, IN HANDLE SourceHandle, IN HANDLE TargetProcessHandle, OUT PHANDLE TargetHandle, IN ACCESS_MASK DesiredAccess, IN ULONG HandleAttributes, IN ULONG Options)
_NTFN_EXTERN NTSTATUS	_NtMakePermanentObject (IN HANDLE Object)
_NTFN_EXTERN NTSTATUS	_NtMakeTemporaryObject (IN HANDLE Handle)
_NTFN_EXTERN NTSTATUS	_NtQueryObject (OPTIN HANDLE Handle, IN OBJECT_INFORMATION_CLASS ObjectInformationClass, OUT PVOID ObjectInformation, IN ULONG ObjectInformationLength, OPTOUT PULONG ReturnLength)
_NTFN_EXTERN NTSTATUS	_NtSetInformationObject (IN HANDLE ObjectHandle, IN OBJECT_INFORMATION_CLASS ObjectInformationClass, IN PVOID ObjectInformation, IN ULONG Length)
_NTFN_EXTERN NTSTATUS	_NtQuerySecurityObject (IN HANDLE Handle, IN SECURITY_INFORMATION SecurityInformation, OUT PSECURITY_DESCRIPTOR SecurityDescriptor, IN ULONG Length, OUT PULONG LengthNeeded)
_NTFN_EXTERN NTSTATUS	_NtSetSecurityObject (IN HANDLE Handle, IN SECURITY_INFORMATION SecurityInformation, IN PSECURITY_DESCRIPTOR SecurityDescriptor)
_NTFN_EXTERN NTSTATUS	_NtWaitForSingleObject (IN HANDLE Object, IN BOOLEAN Alertable, IN PLARGE_INTEGER Timeout OPTIONAL)
_NTFN_EXTERN NTSTATUS	_NtSignalAndWaitForSingleObject (IN HANDLE SignalObject, IN HANDLE WaitObject, IN BOOLEAN Alertable, IN PLARGE_INTEGER Time)
_NTFN_EXTERN NTSTATUS	_NtWaitForMultipleObjects (IN ULONG Count, IN HANDLE Object[], IN WAIT_TYPE WaitType, IN BOOLEAN Alertable, IN PLARGE_INTEGER Time)
_NTFN_EXTERN NTSTATUS	_NtWaitForMultipleObjects32 (IN ULONG ObjectCount, IN PLONG Handles, IN WAIT_TYPE WaitType, IN BOOLEAN Alertable, IN PLARGE_INTEGER TimeOut OPTIONAL)
_NTFN_EXTERN NTSTATUS	_NtCreateDirectoryObject (OUT PHANDLE DirectoryHandle, IN ACCESS_MASK DesiredAccess, IN POBJECT_ATTRIBUTES ObjectAttributes)
_NTFN_EXTERN NTSTATUS	_NtOpenDirectoryObject (OUT PHANDLE FileHandle, IN ACCESS_MASK DesiredAccess, IN POBJECT_ATTRIBUTES ObjectAttributes)
_NTFN_EXTERN NTSTATUS	_NtQueryDirectoryObject (IN HANDLE DirectoryHandle, OUT PVOID Buffer, IN ULONG BufferLength, IN BOOLEAN ReturnSingleEntry, IN BOOLEAN RestartScan, INOUT PULONG Context, OPTOUT PULONG ReturnLength)
_NTFN_EXTERN NTSTATUS	_NtCreateSymbolicLinkObject (OUT PHANDLE SymbolicLinkHandle, IN ACCESS_MASK DesiredAccess, IN POBJECT_ATTRIBUTES ObjectAttributes, IN PUNICODE_STRING Name)
_NTFN_EXTERN NTSTATUS	_NtOpenSymbolicLinkObject (OUT PHANDLE SymbolicLinkHandle, IN ACCESS_MASK DesiredAccess, IN POBJECT_ATTRIBUTES ObjectAttributes)
_NTFN_EXTERN NTSTATUS	_NtQuerySymbolicLinkObject (IN HANDLE SymLinkObjHandle, OUT PUNICODE_STRING LinkTarget, OPTOUT PULONG DataWritten)
_NTFN_EXTERN NTSTATUS	_NtCloseObjectAuditAlarm (IN PUNICODE_STRING SubsystemName, IN PVOID HandleId OPTIONAL, IN BOOLEAN GenerateOnClose)
_NTFN_EXTERN NTSTATUS	_NtDeleteObjectAuditAlarm (IN PUNICODE_STRING SubsystemName, IN PVOID HandleId OPTIONAL, IN BOOLEAN GenerateOnClose)

Function Documentation

_NtClose()

_NTFN_EXTERN NTSTATUS _NtClose

(

IN HANDLE

Handle

)

_NtDuplicateObject()

_NTFN_EXTERN NTSTATUS _NtDuplicateObject	(	IN HANDLE	SourceProcessHandle,
		IN HANDLE	SourceHandle,
		IN HANDLE	TargetProcessHandle,
		OUT PHANDLE	TargetHandle,
		IN ACCESS_MASK	DesiredAccess,
		IN ULONG	HandleAttributes,
		IN ULONG	Options
	)

_NtMakePermanentObject()

_NTFN_EXTERN NTSTATUS _NtMakePermanentObject

(

IN HANDLE

Object

)

_NtMakeTemporaryObject()

_NTFN_EXTERN NTSTATUS _NtMakeTemporaryObject

(

IN HANDLE

Handle

)

_NtQueryObject()

_NTFN_EXTERN NTSTATUS _NtQueryObject	(	OPTIN HANDLE	Handle,
		IN OBJECT_INFORMATION_CLASS	ObjectInformationClass,
		OUT PVOID	ObjectInformation,
		IN ULONG	ObjectInformationLength,
		OPTOUT PULONG	ReturnLength
	)

_NtSetInformationObject()

_NTFN_EXTERN NTSTATUS _NtSetInformationObject	(	IN HANDLE	ObjectHandle,
		IN OBJECT_INFORMATION_CLASS	ObjectInformationClass,
		IN PVOID	ObjectInformation,
		IN ULONG	Length
	)

_NtQuerySecurityObject()

_NTFN_EXTERN NTSTATUS _NtQuerySecurityObject	(	IN HANDLE	Handle,
		IN SECURITY_INFORMATION	SecurityInformation,
		OUT PSECURITY_DESCRIPTOR	SecurityDescriptor,
		IN ULONG	Length,
		OUT PULONG	LengthNeeded
	)

_NtSetSecurityObject()

_NTFN_EXTERN NTSTATUS _NtSetSecurityObject	(	IN HANDLE	Handle,
		IN SECURITY_INFORMATION	SecurityInformation,
		IN PSECURITY_DESCRIPTOR	SecurityDescriptor
	)

_NtWaitForSingleObject()

_NTFN_EXTERN NTSTATUS _NtWaitForSingleObject	(	IN HANDLE	Object,
		IN BOOLEAN	Alertable,
		IN PLARGE_INTEGER Timeout	OPTIONAL
	)

_NtSignalAndWaitForSingleObject()

_NTFN_EXTERN NTSTATUS _NtSignalAndWaitForSingleObject	(	IN HANDLE	SignalObject,
		IN HANDLE	WaitObject,
		IN BOOLEAN	Alertable,
		IN PLARGE_INTEGER	Time
	)

_NtWaitForMultipleObjects()

_NTFN_EXTERN NTSTATUS _NtWaitForMultipleObjects	(	IN ULONG	Count,
		IN HANDLE	Object[],
		IN WAIT_TYPE	WaitType,
		IN BOOLEAN	Alertable,
		IN PLARGE_INTEGER	Time
	)

_NtWaitForMultipleObjects32()

_NTFN_EXTERN NTSTATUS _NtWaitForMultipleObjects32	(	IN ULONG	ObjectCount,
		IN PLONG	Handles,
		IN WAIT_TYPE	WaitType,
		IN BOOLEAN	Alertable,
		IN PLARGE_INTEGER TimeOut	OPTIONAL
	)

_NtCreateDirectoryObject()

_NTFN_EXTERN NTSTATUS _NtCreateDirectoryObject	(	OUT PHANDLE	DirectoryHandle,
		IN ACCESS_MASK	DesiredAccess,
		IN POBJECT_ATTRIBUTES	ObjectAttributes
	)

_NtOpenDirectoryObject()

_NTFN_EXTERN NTSTATUS _NtOpenDirectoryObject	(	OUT PHANDLE	FileHandle,
		IN ACCESS_MASK	DesiredAccess,
		IN POBJECT_ATTRIBUTES	ObjectAttributes
	)

_NtQueryDirectoryObject()

_NTFN_EXTERN NTSTATUS _NtQueryDirectoryObject	(	IN HANDLE	DirectoryHandle,
		OUT PVOID	Buffer,
		IN ULONG	BufferLength,
		IN BOOLEAN	ReturnSingleEntry,
		IN BOOLEAN	RestartScan,
		INOUT PULONG	Context,
		OPTOUT PULONG	ReturnLength
	)

_NtCreateSymbolicLinkObject()

_NTFN_EXTERN NTSTATUS _NtCreateSymbolicLinkObject	(	OUT PHANDLE	SymbolicLinkHandle,
		IN ACCESS_MASK	DesiredAccess,
		IN POBJECT_ATTRIBUTES	ObjectAttributes,
		IN PUNICODE_STRING	Name
	)

_NtOpenSymbolicLinkObject()

_NTFN_EXTERN NTSTATUS _NtOpenSymbolicLinkObject	(	OUT PHANDLE	SymbolicLinkHandle,
		IN ACCESS_MASK	DesiredAccess,
		IN POBJECT_ATTRIBUTES	ObjectAttributes
	)

_NtQuerySymbolicLinkObject()

_NTFN_EXTERN NTSTATUS _NtQuerySymbolicLinkObject	(	IN HANDLE	SymLinkObjHandle,
		OUT PUNICODE_STRING	LinkTarget,
		OPTOUT PULONG	DataWritten
	)

_NtCloseObjectAuditAlarm()

_NTFN_EXTERN NTSTATUS _NtCloseObjectAuditAlarm	(	IN PUNICODE_STRING	SubsystemName,
		IN PVOID HandleId	OPTIONAL,
		IN BOOLEAN	GenerateOnClose
	)

_NtDeleteObjectAuditAlarm()

_NTFN_EXTERN NTSTATUS _NtDeleteObjectAuditAlarm	(	IN PUNICODE_STRING	SubsystemName,
		IN PVOID HandleId	OPTIONAL,
		IN BOOLEAN	GenerateOnClose
	)