For these transactions, function in the primary client request indicates the operation to be performed. It may assume one of the following values:
| SubCommand Code ================================== |
Value ===== |
Description =========================== |
| NT_TRANSACT_CREATE | 1 | File open/create |
| NT_TRANSACT_IOCTL | 2 | Device IOCTL |
| NT_TRANSACT_SET_SECURITY_DESC | 3 | Set security descriptor |
| NT_TRANSACT_NOTIFY_CHANGE | 4 | Start directory watch |
| NT_TRANSACT_RENAME | 5 | Reserved (Handle-based rename) |
| NT_TRANSACT_QUERY_SECURITY_DESC | 6 | Retrieve security descriptor info |