Undocumented functions of NTDLL

2OO1, 24 February


NtCreateProfile
NtCreateProfile

NTSYSAPI 
NTSTATUS
NTAPI

NtCreateProfile(
OUT PHANDLE ProfileHandle, IN HANDLE Process OPTIONAL, IN PVOID ImageBase, IN ULONG ImageSize, IN ULONG BucketSize, IN PVOID Buffer, IN ULONG BufferSize, IN KPROFILE_SOURCE ProfileSource, IN KAFFINITY Affinity );



Function NtCreateProfile creates Profile Object.

Profile Objects are used for application profiling. There're 24 profile counters defined in KPROFILE_SOURCE enumeration type. Single Profile Object can be used to get information from one performance counter.



Requirements:
Library: ntdll.lib
Privileges for UserMode: SE_PROF_SINGLE_PROCESS_PRIVILEGE
Privileges for KernelMode: SE_SYSTEM_PROFILE_PRIVILEGE


See also:
KPROFILE_SOURCE
NtQueryIntervalProfile
NtSetIntervalProfile
NtStartProfile
NtStopProfile