[solved]Why are the execution results in the procedure inconsistent with the results in the non-procedure ?

[Zero Ray]

Code: Select all

EnableExplicit

Structure BootOrder
  BootOrderList.l[128]
EndStructure

Prototype.l ProtoNtQueryBootEntryOrder(Ids.l, Count.l)

Global NtQueryBootEntryOrder.ProtoNtQueryBootEntryOrder

If OpenLibrary(0, "ntdll.dll")
  NtQueryBootEntryOrder = GetFunction(0, "NtQueryBootEntryOrder")
EndIf

Procedure Test()
  Protected BootOrder.BootOrder, Ids.l, Count.l, tmp.b, State.i
  
  Count = SizeOf(BootOrder)
  RtlAdjustPrivilege_(22, 1, 0, @tmp)
  State = NtQueryBootEntryOrder(@BootOrder, @Count)
  RtlAdjustPrivilege_(22, 0, 0, @tmp)
  ProcedureReturn State
EndProcedure

Debug Test()

Define BootOrder.BootOrder, Ids.l, Count.l, tmp.b, State.i

Count = SizeOf(BootOrder)
RtlAdjustPrivilege_(22, 1, 0, @tmp)
State = NtQueryBootEntryOrder(@BootOrder, @Count)
RtlAdjustPrivilege_(22, 0, 0, @tmp)
Debug State

Why are the execution results in the procedure inconsistent with the results in the non-procedure ?

[mk-soft]

A Boolean ist not a Byte -> tmp.b -> tmp.i

[Zero Ray]

A Boolean ist not a Byte -> tmp.b -> tmp.i

After correcting it to tmp.i, the result is still the same

[mk-soft]

Here both result a same.

What OS and PB Version.

[Zero Ray]

Here both result a same.

What OS and PB Version.

Windows 8.1 x64 And PureBasic 6.04 LTS x64

[fryquez]

NT API functions require *buffers to aligned by 16 Bytes on x64.

[breeze4me]

The value of the "Count" variable seems to be the number of entries, not the memory size.
And some variable types are incorrect.

Run it as an administrator.

Code: Select all

EnableExplicit

Structure BootOrder
  BootOrderList.l[128]
EndStructure

Prototype.l ProtoNtQueryBootEntryOrder(*Ids, *Count)

Global NtQueryBootEntryOrder.ProtoNtQueryBootEntryOrder

If OpenLibrary(0, "ntdll.dll")
  NtQueryBootEntryOrder = GetFunction(0, "NtQueryBootEntryOrder")
EndIf

Procedure.l Test()
  Protected BootOrder.BootOrder, Count.l, tmp.i, State.l
  
  ;Count = SizeOf(BootOrder)
  Count = 128    ;OK on my PC.
  RtlAdjustPrivilege_(22, 1, 0, @tmp)
  State = NtQueryBootEntryOrder(@BootOrder, @Count)
  Debug "Count: " + Count
  RtlAdjustPrivilege_(22, 0, 0, @tmp)
  ProcedureReturn State
EndProcedure

Debug "Result: " + Test()

Define BootOrder.BootOrder, Count.l, tmp.i, State.l

;Count = SizeOf(BootOrder)
Count = 128
RtlAdjustPrivilege_(22, 1, 0, @tmp)
State = NtQueryBootEntryOrder(@BootOrder, @Count)
Debug "Count: " + Count
RtlAdjustPrivilege_(22, 0, 0, @tmp)
Debug "Result: " + State

[Zero Ray]

The value of the "Count" variable seems to be the number of entries, not the memory size.
And some variable types are incorrect.

Run it as an administrator.

Code: Select all

EnableExplicit

Structure BootOrder
  BootOrderList.l[128]
EndStructure

Prototype.l ProtoNtQueryBootEntryOrder(*Ids, *Count)

Global NtQueryBootEntryOrder.ProtoNtQueryBootEntryOrder

If OpenLibrary(0, "ntdll.dll")
  NtQueryBootEntryOrder = GetFunction(0, "NtQueryBootEntryOrder")
EndIf

Procedure.l Test()
  Protected BootOrder.BootOrder, Count.l, tmp.i, State.l
  
  ;Count = SizeOf(BootOrder)
  Count = 128    ;OK on my PC.
  RtlAdjustPrivilege_(22, 1, 0, @tmp)
  State = NtQueryBootEntryOrder(@BootOrder, @Count)
  Debug "Count: " + Count
  RtlAdjustPrivilege_(22, 0, 0, @tmp)
  ProcedureReturn State
EndProcedure

Debug "Result: " + Test()

Define BootOrder.BootOrder, Count.l, tmp.i, State.l

;Count = SizeOf(BootOrder)
Count = 128
RtlAdjustPrivilege_(22, 1, 0, @tmp)
State = NtQueryBootEntryOrder(@BootOrder, @Count)
Debug "Count: " + Count
RtlAdjustPrivilege_(22, 0, 0, @tmp)
Debug "Result: " + State

It worked, thank you very much!