Undocumented functions of NTDLL

2OOO, 2 December

NTSYSAPI 
NTSTATUS
NTAPI


RtlCreateUserProcess(



  IN PUNICODE_STRING      ImagePath,
  IN ULONG                ObjectAttributes,
  IN OUT PRTL_USER_PROCESS_PARAMETERS ProcessParameters,
  IN PSECURITY_DESCRIPTOR ProcessSecurityDescriptor OPTIONAL,
  IN PSECURITY_DESCRIPTOR ThreadSecurityDescriptor OPTIONAL,
  IN HANDLE               ParentProcess,
  IN BOOLEAN              InheritHandles,
  IN HANDLE               DebugPort OPTIONAL,
  IN HANDLE               ExceptionPort OPTIONAL,
  OUT PRTL_USER_PROCESS_INFORMATION ProcessInformation );

ImagePath

Full path to executable image, in NT format (ex: "\??\C:\WinNT\SYSTEM32\cmd.exe").

ObjectAttributes

Used in File object creation. Valid are OBJ_INHERIT and OBJ_CASE_INSENSITIVE.

ProcessParameters

Normalized RTL_USER_PROCESS_PARAMETERS structure pointer. See RtlCreateProcessParameters for more information.

ParentProcess

Handle to object Process, opened with PROCESS_CREATE_PROCESS access.

ProcessInformation

Pointer to user-allocated structure RTL_USER_PROCESS_INFORMATION.

Documented by:

Tomasz Nowak

Reactos

Library: ntdll.lib

RTL_USER_PROCESS_INFORMATION

RTL_USER_PROCESS_PARAMETERS

RtlCreateProcessParameters

RtlCreateUserThread

RtlNormalizeProcessParams