| 109 | namespace AddressSpace { |
| 110 | _IRQL_requires_max_(APC_LEVEL) |
| 111 | BOOLEAN AttachToProcessByPid(HANDLE ProcessId, OUT PKAPC_STATE ApcState) { |
| 112 | if (!ApcState) return FALSE; |
| 113 | PEPROCESS Process = Descriptors::GetEPROCESS(ProcessId); |
| 114 | if (!Process) return FALSE; |
| 115 | BOOLEAN Status = AttachToProcess(Process, ApcState); |
| 116 | ObDereferenceObject(Process); |
| 117 | return Status; |
| 118 | } |
| 119 | |
| 120 | _IRQL_requires_max_(APC_LEVEL) |
| 121 | BOOLEAN AttachToProcess(PEPROCESS Process, OUT PKAPC_STATE ApcState) { |
nothing calls this directly
no test coverage detected