#include <phapp.h>
#include <symprv.h>
Go to the source code of this file.
|
VOID | PhpAnalyzeWaitPassive (_In_ HWND hWnd, _In_ HANDLE ProcessId, _In_ HANDLE ThreadId) |
|
BOOLEAN NTAPI | PhpWalkThreadStackAnalyzeCallback (_In_ PPH_THREAD_STACK_FRAME StackFrame, _In_opt_ PVOID Context) |
|
VOID | PhpAnalyzeWaitFallbacks (_In_ PANALYZE_WAIT_CONTEXT Context) |
|
VOID | PhpInitializeServiceNumbers (VOID) |
|
PPH_STRING | PhpaGetHandleString (_In_ HANDLE ProcessHandle, _In_ HANDLE Handle) |
|
VOID | PhpGetWfmoInformation (_In_ HANDLE ProcessHandle, _In_ BOOLEAN IsWow64, _In_ ULONG NumberOfHandles, _In_ PHANDLE AddressOfHandles, _In_ WAIT_TYPE WaitType, _In_ BOOLEAN Alertable, _Inout_ PPH_STRING_BUILDER StringBuilder) |
|
PPH_STRING | PhpaGetSendMessageReceiver (_In_ HANDLE ThreadId) |
|
PPH_STRING | PhpaGetAlpcInformation (_In_ HANDLE ThreadId) |
|
VOID | PhUiAnalyzeWaitThread (_In_ HWND hWnd, _In_ HANDLE ProcessId, _In_ HANDLE ThreadId, _In_ PPH_SYMBOL_PROVIDER SymbolProvider) |
|
#define NT_FUNC_MATCH |
( |
|
Name | ) |
|
Value:( \
PhStartsWithString2(name, L
"ntdll.dll!Nt" L##Name,
TRUE) || \
PhStartsWithString2(name, L
"ntdll.dll!Zw" L##Name,
TRUE) \
)
typedef HWND(WINAPI * _GetSendMessageReceiver)(_In_ HANDLE ThreadId) |
typedef NTSTATUS(NTAPI * _NtAlpcQueryInformation)(_In_ HANDLE PortHandle, _In_ ALPC_PORT_INFORMATION_CLASS PortInformationClass, _Out_writes_bytes_(Length) PVOID PortInformation, _In_ ULONG Length, _Out_opt_ PULONG ReturnLength) |
static PPH_STRING PhpaGetAlpcInformation |
( |
_In_ HANDLE |
ThreadId | ) |
|
static PPH_STRING PhpaGetHandleString |
( |
_In_ HANDLE |
ProcessHandle, |
|
|
_In_ HANDLE |
Handle |
|
) |
| |
static PPH_STRING PhpaGetSendMessageReceiver |
( |
_In_ HANDLE |
ThreadId | ) |
|
VOID PhpAnalyzeWaitPassive |
( |
_In_ HWND |
hWnd, |
|
|
_In_ HANDLE |
ProcessId, |
|
|
_In_ HANDLE |
ThreadId |
|
) |
| |
static VOID PhpGetWfmoInformation |
( |
_In_ HANDLE |
ProcessHandle, |
|
|
_In_ BOOLEAN |
IsWow64, |
|
|
_In_ ULONG |
NumberOfHandles, |
|
|
_In_ PHANDLE |
AddressOfHandles, |
|
|
_In_ WAIT_TYPE |
WaitType, |
|
|
_In_ BOOLEAN |
Alertable, |
|
|
_Inout_ PPH_STRING_BUILDER |
StringBuilder |
|
) |
| |
static VOID PhpInitializeServiceNumbers |
( |
VOID |
| ) |
|
static BOOLEAN NTAPI PhpWalkThreadStackAnalyzeCallback |
( |
_In_ PPH_THREAD_STACK_FRAME |
StackFrame, |
|
|
_In_opt_ PVOID |
Context |
|
) |
| |
VOID PhUiAnalyzeWaitThread |
( |
_In_ HWND |
hWnd, |
|
|
_In_ HANDLE |
ProcessId, |
|
|
_In_ HANDLE |
ThreadId, |
|
|
_In_ PPH_SYMBOL_PROVIDER |
SymbolProvider |
|
) |
| |