Function GetEPROCESS

Kernel-Bridge/API/ProcessesUtils.cpp:11–16

    namespace Descriptors {
        _IRQL_requires_max_(APC_LEVEL)
        PEPROCESS GetEPROCESS(HANDLE ProcessId) {
            PEPROCESS Process;
            return NT_SUCCESS(PsLookupProcessByProcessId(ProcessId, &Process)) 
                ? Process 
                : NULL;
        }

        _IRQL_requires_max_(APC_LEVEL)
        PETHREAD GetETHREAD(HANDLE ThreadId) {