hub / github.com/Air14/HyperHide / QueryHiddenProcess

Function QueryHiddenProcess

HyperHideDrv/Hider.cpp:192–211 · view source on GitHub ↗

Source from the content-addressed store, hash-verified

source not stored for this graph (policy: none)

Callers 7

HookedNtQueryInformationProcessFunction · 0.85

HookedNtSetInformationProcessFunction · 0.85

HookedNtCloseFunction · 0.85

NTSTATUS (NTAPI* OriginalNtCreateProcessEx) ( OUT PHANDLE ProcessHandle, IN ACCESS_MASK DesiredAccess, IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL, IN HANDLE ParentProcess, IN ULONG Flags, IN HANDLE SectionHandle OPTIONAL, IN HANDLE DebugPort OPTIONAL, IN HANDLE ExceptionPort OPTIONAL, IN ULONG JobMemberLevel )Function · 0.85

NTSTATUS(NTAPI* OriginalNtCreateUserProcess) ( PHANDLE ProcessHandle, PHANDLE ThreadHandle, ACCESS_MASK ProcessDesiredAccess, ACCESS_MASK ThreadDesiredAccess, POBJECT_ATTRIBUTES ProcessObjectAttributes, POBJECT_ATTRIBUTES ThreadObjectAttributes, ULONG ProcessFlags, ULONG ThreadFlags, PRTL_USER_PROCESS_PARAMETERS ProcessParameters, PVOID CreateInfo, // PPS_CREATE_INFO PVOID AttributeList // PPS_ATTRIBUTE_LIST )Function · 0.85

HookedNtQuerySystemTimeFunction · 0.85

HookedNtQueryPerformanceCounterFunction · 0.85

Calls

no outgoing calls

Tested by

no test coverage detected