MCPcopy Create free account
hub / github.com/HoShiMin/Kernel-Bridge / SuspendProcess

Function SuspendProcess

Kernel-Bridge/API/ProcessesUtils.cpp:181–190  ·  view source on GitHub ↗

Source from the content-addressed store, hash-verified

179
180 _IRQL_requires_max_(APC_LEVEL)
181 NTSTATUS SuspendProcess(IN PEPROCESS Process) {
182 using _PsSuspendProcess = NTSTATUS (NTAPI*)(
183 IN PEPROCESS Process
184 );
185 static auto _SuspendProcess =
186 static_cast<_PsSuspendProcess>(Importer::GetKernelProcAddress(L"PsSuspendProcess"));
187 return _SuspendProcess
188 ? _SuspendProcess(Process)
189 : STATUS_NOT_IMPLEMENTED;
190 }
191
192 _IRQL_requires_max_(APC_LEVEL)
193 NTSTATUS ResumeProcess(IN PEPROCESS Process) {

Callers 1

KbSuspendProcessFunction · 0.85

Calls 1

GetKernelProcAddressFunction · 0.70

Tested by

no test coverage detected