MCPcopy Create free account
hub / github.com/HoShiMin/Kernel-Bridge / OpenProcess

Function OpenProcess

Kernel-Bridge/API/ProcessesUtils.cpp:27–41  ·  view source on GitHub ↗

Source from the content-addressed store, hash-verified

25
26 _IRQL_requires_max_(PASSIVE_LEVEL)
27 NTSTATUS OpenProcess(
28 HANDLE ProcessId,
29 OUT PHANDLE hProcess,
30 ACCESS_MASK AccessMask,
31 ULONG Attributes
32 ) {
33 CLIENT_ID ClientId;
34 ClientId.UniqueProcess = ProcessId;
35 ClientId.UniqueThread = 0;
36
37 OBJECT_ATTRIBUTES ObjectAttributes;
38 InitializeObjectAttributes(&ObjectAttributes, NULL, Attributes, NULL, NULL);
39
40 return ZwOpenProcess(hProcess, AccessMask, &ObjectAttributes, &ClientId);
41 }
42
43 _IRQL_requires_max_(PASSIVE_LEVEL)
44 NTSTATUS OpenProcessByPointer(

Callers 6

TerminateProcessByPidFunction · 0.85
KbOpenProcessFunction · 0.85
KbAllocUserMemoryFunction · 0.85
KbFreeUserMemoryFunction · 0.85
KbCreateUserThreadFunction · 0.85
KbCreateSystemThreadFunction · 0.85

Calls

no outgoing calls

Tested by

no test coverage detected