Undocumented functions of NTDLL

2OO4, 6 October

typedef struct _OBJECT_BASIC_INFORMATION {



  ULONG                   Attributes;
  ACCESS_MASK             DesiredAccess;
  ULONG                   HandleCount;
  ULONG                   ReferenceCount;
  ULONG                   PagedPoolUsage;
  ULONG                   NonPagedPoolUsage;
  ULONG                   Reserved[3];
  ULONG                   NameInformationLength;
  ULONG                   TypeInformationLength;
  ULONG                   SecurityDescriptorLength;
  LARGE_INTEGER           CreationTime;

} OBJECT_BASIC_INFORMATION, *POBJECT_BASIC_INFORMATION;

• Attributes     

• DesiredAccess     

• HandleCount     

• ReferenceCount     

• PagedPoolUsage     

• NonPagedPoolUsage     

• Reserved[3]     

• NameInformationLength     

• TypeInformationLength     

• SecurityDescriptorLength     

• CreationTime     
  
  
  

  Supported on system versions:

  NT 4.0,Win 2000,Win XP/2003

  
  
  
  

  Documented by:

  Tomasz Nowak

  
  
  
  

Library: ntdll.lib

NtQueryObject

OBJECT_INFORMATION_CLASS