hidnproc.c File Reference

#include <phapp.h>
#include <kphuser.h>
#include <settings.h>
#include <hidnproc.h>
#include <windowsx.h>

Go to the source code of this file.

Typedefs
typedef struct _CSR_HANDLES_CONTEXT	CSR_HANDLES_CONTEXT
typedef struct _CSR_HANDLES_CONTEXT *	PCSR_HANDLES_CONTEXT
typedef struct _OPEN_PROCESS_BY_CSR_CONTEXT	OPEN_PROCESS_BY_CSR_CONTEXT
typedef struct _OPEN_PROCESS_BY_CSR_CONTEXT *	POPEN_PROCESS_BY_CSR_CONTEXT

Functions
INT_PTR CALLBACK	PhpHiddenProcessesDlgProc (_In_ HWND hwndDlg, _In_ UINT uMsg, _In_ WPARAM wParam, _In_ LPARAM lParam)
COLORREF NTAPI	PhpHiddenProcessesColorFunction (_In_ INT Index, _In_ PVOID Param, _In_opt_ PVOID Context)
BOOLEAN NTAPI	PhpHiddenProcessesCallback (_In_ PPH_HIDDEN_PROCESS_ENTRY Process, _In_opt_ PVOID Context)
PPH_PROCESS_ITEM	PhpCreateProcessItemForHiddenProcess (_In_ PPH_HIDDEN_PROCESS_ENTRY Entry)
VOID	PhShowHiddenProcessesDialog (VOID)
NTSTATUS	PhpEnumHiddenProcessesBruteForce (_In_ PPH_ENUM_HIDDEN_PROCESSES_CALLBACK Callback, _In_opt_ PVOID Context)
NTSTATUS	PhpEnumHiddenProcessesCsrHandles (_In_ PPH_ENUM_HIDDEN_PROCESSES_CALLBACK Callback, _In_opt_ PVOID Context)
NTSTATUS	PhEnumHiddenProcesses (_In_ PH_HIDDEN_PROCESS_METHOD Method, _In_ PPH_ENUM_HIDDEN_PROCESSES_CALLBACK Callback, _In_opt_ PVOID Context)
NTSTATUS	PhpOpenCsrProcesses (_Out_ PHANDLE *ProcessHandles, _Out_ PULONG NumberOfProcessHandles)
NTSTATUS	PhpGetCsrHandleProcessId (_Inout_ PPH_CSR_HANDLE_INFO Handle)
NTSTATUS	PhEnumCsrProcessHandles (_In_ PPH_ENUM_CSR_PROCESS_HANDLES_CALLBACK Callback, _In_opt_ PVOID Context)
NTSTATUS	PhOpenProcessByCsrHandle (_Out_ PHANDLE ProcessHandle, _In_ ACCESS_MASK DesiredAccess, _In_ PPH_CSR_HANDLE_INFO Handle)
NTSTATUS	PhOpenProcessByCsrHandles (_Out_ PHANDLE ProcessHandle, _In_ ACCESS_MASK DesiredAccess, _In_ HANDLE ProcessId)

Variables
HWND	PhHiddenProcessesWindowHandle = NULL
HWND	PhHiddenProcessesListViewHandle = NULL

Typedef Documentation

typedef struct _CSR_HANDLES_CONTEXT CSR_HANDLES_CONTEXT

typedef struct _OPEN_PROCESS_BY_CSR_CONTEXT OPEN_PROCESS_BY_CSR_CONTEXT

typedef struct _CSR_HANDLES_CONTEXT * PCSR_HANDLES_CONTEXT

typedef struct _OPEN_PROCESS_BY_CSR_CONTEXT * POPEN_PROCESS_BY_CSR_CONTEXT

Function Documentation

NTSTATUS PhEnumCsrProcessHandles	(	_In_ PPH_ENUM_CSR_PROCESS_HANDLES_CALLBACK	Callback,
		_In_opt_ PVOID	Context
	)

Definition at line 1094 of file hidnproc.c.

NTSTATUS PhEnumHiddenProcesses	(	_In_ PH_HIDDEN_PROCESS_METHOD	Method,
		_In_ PPH_ENUM_HIDDEN_PROCESSES_CALLBACK	Callback,
		_In_opt_ PVOID	Context
	)

Definition at line 968 of file hidnproc.c.

NTSTATUS PhOpenProcessByCsrHandle	(	_Out_ PHANDLE	ProcessHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ PPH_CSR_HANDLE_INFO	Handle
	)

Definition at line 1164 of file hidnproc.c.

NTSTATUS PhOpenProcessByCsrHandles	(	_Out_ PHANDLE	ProcessHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ HANDLE	ProcessId
	)

Definition at line 1239 of file hidnproc.c.

static PPH_PROCESS_ITEM PhpCreateProcessItemForHiddenProcess

(

_In_ PPH_HIDDEN_PROCESS_ENTRY

Entry

)

Definition at line 537 of file hidnproc.c.

NTSTATUS PhpEnumHiddenProcessesBruteForce	(	_In_ PPH_ENUM_HIDDEN_PROCESSES_CALLBACK	Callback,
		_In_opt_ PVOID	Context
	)

Definition at line 749 of file hidnproc.c.

NTSTATUS PhpEnumHiddenProcessesCsrHandles	(	_In_ PPH_ENUM_HIDDEN_PROCESSES_CALLBACK	Callback,
		_In_opt_ PVOID	Context
	)

Definition at line 932 of file hidnproc.c.

NTSTATUS PhpGetCsrHandleProcessId

(

_Inout_ PPH_CSR_HANDLE_INFO

Handle

)

Definition at line 1043 of file hidnproc.c.

static BOOLEAN NTAPI PhpHiddenProcessesCallback	(	_In_ PPH_HIDDEN_PROCESS_ENTRY	Process,
		_In_opt_ PVOID	Context
	)

Definition at line 508 of file hidnproc.c.

static COLORREF NTAPI PhpHiddenProcessesColorFunction	(	_In_ INT	Index,
		_In_ PVOID	Param,
		_In_opt_ PVOID	Context
	)

Definition at line 488 of file hidnproc.c.

static INT_PTR CALLBACK PhpHiddenProcessesDlgProc	(	_In_ HWND	hwndDlg,
		_In_ UINT	uMsg,
		_In_ WPARAM	wParam,
		_In_ LPARAM	lParam
	)

Definition at line 109 of file hidnproc.c.

NTSTATUS PhpOpenCsrProcesses	(	_Out_ PHANDLE *	ProcessHandles,
		_Out_ PULONG	NumberOfProcessHandles
	)

Definition at line 990 of file hidnproc.c.

VOID PhShowHiddenProcessesDialog

(

VOID

)

Definition at line 80 of file hidnproc.c.

Variable Documentation

HWND PhHiddenProcessesListViewHandle = NULL

Definition at line 71 of file hidnproc.c.

HWND PhHiddenProcessesWindowHandle = NULL

Definition at line 70 of file hidnproc.c.