MCPcopy Create free account
hub / github.com/HoShiMin/Kernel-Bridge / ResumeProcess

Function ResumeProcess

Kernel-Bridge/API/ProcessesUtils.cpp:193–202  ·  view source on GitHub ↗

Source from the content-addressed store, hash-verified

191
192 _IRQL_requires_max_(APC_LEVEL)
193 NTSTATUS ResumeProcess(IN PEPROCESS Process) {
194 using _PsResumeProcess = NTSTATUS (NTAPI*)(
195 IN PEPROCESS Process
196 );
197 static auto _SuspendProcess =
198 static_cast<_PsResumeProcess>(Importer::GetKernelProcAddress(L"PsResumeProcess"));
199 return _SuspendProcess
200 ? _SuspendProcess(Process)
201 : STATUS_NOT_IMPLEMENTED;
202 }
203
204 _IRQL_requires_max_(PASSIVE_LEVEL)
205 NTSTATUS CreateUserThread(

Callers 1

KbResumeProcessFunction · 0.85

Calls 1

GetKernelProcAddressFunction · 0.70

Tested by

no test coverage detected