| 191 | |
| 192 | _IRQL_requires_max_(APC_LEVEL) |
| 193 | NTSTATUS ResumeProcess(IN PEPROCESS Process) { |
| 194 | using _PsResumeProcess = NTSTATUS (NTAPI*)( |
| 195 | IN PEPROCESS Process |
| 196 | ); |
| 197 | static auto _SuspendProcess = |
| 198 | static_cast<_PsResumeProcess>(Importer::GetKernelProcAddress(L"PsResumeProcess")); |
| 199 | return _SuspendProcess |
| 200 | ? _SuspendProcess(Process) |
| 201 | : STATUS_NOT_IMPLEMENTED; |
| 202 | } |
| 203 | |
| 204 | _IRQL_requires_max_(PASSIVE_LEVEL) |
| 205 | NTSTATUS CreateUserThread( |
no test coverage detected