Undocumented functions of NTDLL

2OO4, 3O January


OBJECT_INFORMATION_CLASS
OBJECT_INFORMATION_CLASS

typedef enum _OBJECT_INFORMATION_CLASS {




    ObjectBasicInformation,
    ObjectNameInformation,
    ObjectTypeInformation,
    ObjectAllInformation,
    ObjectDataInformation


} OBJECT_INFORMATION_CLASS, *POBJECT_INFORMATION_CLASS;




OBJECT_INFORMATION_CLASS specifies a kind of information of any object available in caller context. It's used with functions NtQueryObject and NtSetInformationObject.
Action
 : Query
Buffer size
 : 0x038
Structure
 : OBJECT_BASIC_INFORMATION
Action
 : Query
Buffer size
 : 0x08
Structure
 : OBJECT_NAME_INFORMATION
Action
 : Query
Buffer size
 : 0x070
Structure
 : OBJECT_TYPE_INFORMATION
Action
 : Query
Buffer size
 : 0x04+
Structure
 : OBJECT_ALL_INFORMATION
Comment
 : Size of buffer depends on number of objects opened by caller.
Action
 : Query, Set
Buffer size
 : 0x02
Structure
 : OBJECT_DATA_INFORMATION



Documented by:
Tomasz Nowak



Requirements:
Library: ntdll.lib


See also:
NtQueryObject
NtSetInformationObject