MCPcopy Create free account
hub / github.com/HoShiMin/Kernel-Bridge / KbQueryInformationProcess

Function KbQueryInformationProcess

User-Bridge/API/User-Bridge.cpp:864–881  ·  view source on GitHub ↗

Source from the content-addressed store, hash-verified

862 namespace Information
863 {
864 BOOL WINAPI KbQueryInformationProcess(
865 WdkTypes::HANDLE hProcess,
866 NtTypes::PROCESSINFOCLASS ProcessInfoClass,
867 OUT PVOID Buffer,
868 ULONG Size,
869 OPTIONAL OUT PULONG ReturnLength
870 ) {
871 ULONG RetLength = 0;
872 KB_QUERY_INFORMATION_PROCESS_THREAD_IN Input = {};
873 Input.Handle = hProcess;
874 Input.Buffer = reinterpret_cast<WdkTypes::PVOID>(Buffer);
875 Input.ReturnLength = reinterpret_cast<WdkTypes::PVOID>(&RetLength);
876 Input.InfoClass = static_cast<ULONG>(ProcessInfoClass);
877 Input.Size = Size;
878 BOOL Status = KbSendRequest(Ctls::KbQueryInformationProcess, &Input, sizeof(Input));
879 if (ReturnLength) *ReturnLength = RetLength;
880 return Status;
881 }
882
883 BOOL WINAPI KbSetInformationProcess(
884 WdkTypes::HANDLE hProcess,

Callers

nothing calls this directly

Calls 1

KbSendRequestFunction · 0.85

Tested by

no test coverage detected