From bd30e38e62dc20102c9a00c8908b7acb8c426330 Mon Sep 17 00:00:00 2001
From: BadHorse <demoking700@gmail.com>
Date: Sun, 16 May 2021 12:13:55 +0000
Subject: [PATCH] Update kutils.hpp

---
 NtWin32k/kutils.hpp | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/NtWin32k/kutils.hpp b/NtWin32k/kutils.hpp
index 8e8ffca..9d1ca7c 100644
--- a/NtWin32k/kutils.hpp
+++ b/NtWin32k/kutils.hpp
@@ -370,7 +370,7 @@ typedef struct _DEVICE_MAP
     UCHAR DriveType[32];
 } DEVICE_MAP, * PDEVICE_MAP;
 
-extern "C" NTSTATUS NtQuerySystemInformation(
+extern "C" NTSTATUS ZwQuerySystemInformation (
 	SYSTEM_INFORMATION_CLASS SystemInformationClass,
 	PVOID                    SystemInformation,
 	ULONG                    SystemInformationLength,
@@ -395,7 +395,7 @@ namespace kutils
         inline auto get_driver_base(const char* driver_name) -> void*
         {
             u32 alloc_size{};
-            NtQuerySystemInformation(
+            ZwQuerySystemInformation (
                 SystemModuleInformation,
                     NULL, alloc_size, &alloc_size);
 
@@ -403,7 +403,7 @@ namespace kutils
                 reinterpret_cast<PRTL_PROCESS_MODULES>(
                     ExAllocatePool(NonPagedPool, alloc_size));
 
-            NtQuerySystemInformation(
+            ZwQuerySystemInformation (
                 SystemModuleInformation,
                     module_info, alloc_size, &alloc_size);
 
@@ -592,7 +592,7 @@ namespace kutils
         inline auto get_pid(const wchar_t* process_name) -> u32
         {
             u32 alloc_size{};
-            NtQuerySystemInformation(
+            ZwQuerySystemInformation (
                 SystemProcessInformation, 
                     nullptr, alloc_size, &alloc_size);
 
@@ -601,7 +601,7 @@ namespace kutils
                     ExAllocatePool(NonPagedPool, alloc_size));
             
             const auto orig_ptr = process_info;
-            NtQuerySystemInformation(
+            ZwQuerySystemInformation (
                 SystemProcessInformation, 
                     process_info, alloc_size, &alloc_size);