#include <phapp.h>
#include <kphuser.h>
#include <extmgri.h>
Go to the source code of this file.
|
VOID NTAPI | PhpHandleProviderDeleteProcedure (_In_ PVOID Object, _In_ ULONG Flags) |
|
VOID NTAPI | PhpHandleItemDeleteProcedure (_In_ PVOID Object, _In_ ULONG Flags) |
|
BOOLEAN | PhHandleProviderInitialization (VOID) |
|
PPH_HANDLE_PROVIDER | PhCreateHandleProvider (_In_ HANDLE ProcessId) |
|
PPH_HANDLE_ITEM | PhCreateHandleItem (_In_opt_ PSYSTEM_HANDLE_TABLE_ENTRY_INFO_EX Handle) |
|
FORCEINLINE BOOLEAN | PhCompareHandleItem (_In_ PPH_HANDLE_ITEM Value1, _In_ PPH_HANDLE_ITEM Value2) |
|
FORCEINLINE ULONG | PhHashHandleItem (_In_ PPH_HANDLE_ITEM Value) |
|
PPH_HANDLE_ITEM | PhpLookupHandleItem (_In_ PPH_HANDLE_PROVIDER HandleProvider, _In_ HANDLE Handle) |
|
PPH_HANDLE_ITEM | PhReferenceHandleItem (_In_ PPH_HANDLE_PROVIDER HandleProvider, _In_ HANDLE Handle) |
|
VOID | PhDereferenceAllHandleItems (_In_ PPH_HANDLE_PROVIDER HandleProvider) |
|
VOID | PhpAddHandleItem (_In_ PPH_HANDLE_PROVIDER HandleProvider, _In_ _Assume_refs_(1) PPH_HANDLE_ITEM HandleItem) |
|
VOID | PhpRemoveHandleItem (_In_ PPH_HANDLE_PROVIDER HandleProvider, _In_ PPH_HANDLE_ITEM HandleItem) |
|
NTSTATUS | PhEnumHandlesGeneric (_In_ HANDLE ProcessId, _In_ HANDLE ProcessHandle, _Out_ PSYSTEM_HANDLE_INFORMATION_EX *Handles, _Out_ PBOOLEAN FilterNeeded) |
| Enumerates all handles in a process.
|
|
NTSTATUS | PhpCreateHandleItemFunction (_In_ PVOID Parameter) |
|
VOID | PhHandleProviderUpdate (_In_ PVOID Object) |
|
NTSTATUS PhEnumHandlesGeneric |
( |
_In_ HANDLE |
ProcessId, |
|
|
_In_ HANDLE |
ProcessHandle, |
|
|
_Out_ PSYSTEM_HANDLE_INFORMATION_EX * |
Handles, |
|
|
_Out_ PBOOLEAN |
FilterNeeded |
|
) |
| |
Enumerates all handles in a process.
- Parameters
-
ProcessId | The ID of the process. |
ProcessHandle | A handle to the process. |
Handles | A variable which receives a pointer to a buffer containing information about the handles. |
FilterNeeded | A variable which receives a boolean indicating whether the handle information needs to be filtered by process ID. |
Definition at line 287 of file hndlprv.c.
BOOLEAN PhHandleProviderInitialization |
( |
VOID |
| ) |
|
VOID PhHandleProviderUpdate |
( |
_In_ PVOID |
Object | ) |
|
NTSTATUS PhpCreateHandleItemFunction |
( |
_In_ PVOID |
Parameter | ) |
|
VOID PhpHandleItemDeleteProcedure |
( |
_In_ PVOID |
Object, |
|
|
_In_ ULONG |
Flags |
|
) |
| |
VOID PhpHandleProviderDeleteProcedure |
( |
_In_ PVOID |
Object, |
|
|
_In_ ULONG |
Flags |
|
) |
| |