Commit Graph

33 Commits

Author SHA1 Message Date
wj32 bee0384557 reverted last revision
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1728 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-08-22 03:51:41 +00:00
wj32 32d8ee319b KPH resource locks don't work yet...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1727 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-08-22 03:37:38 +00:00
wj32 53d7c69bb4 first 64-bit KPH build (version-specific info still needs to be fixed, and KProcessHacker.cs needs to be fixed as well)
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1715 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-08-15 05:43:33 +00:00
wj32 4201dfad3b fixed kernel handle viewing on Windows 7
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1670 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-08-06 09:11:03 +00:00
wj32 5bb2c4f1b3 fixed object type retrieval on Windows 7
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1669 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-08-06 07:03:28 +00:00
wj32 b3d03c4e30 added support for client ID arguments
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1650 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-08-01 07:29:36 +00:00
wj32 29a5b6f67a added KphSsQueryClientEntry, fixed critical handle referencing bugs
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1639 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-07-27 08:37:33 +00:00
wj32 9da61ad2c8 many improvements to KphSs
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1633 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-07-26 06:50:37 +00:00
wj32 bc1878d845 system service logging works!
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1629 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-07-24 02:24:21 +00:00
wj32 d4b61e2f16 improved guarded lock performance
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1628 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-07-23 06:38:59 +00:00
wj32 b41cf81165 * introduced guarded locks
* fixed KiFastCallEntry scanning
* fixed client entry (PhCl) pool leaks (now uses ref.c for client entries)
* fixed ref.c delete procedure synchronization

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1627 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-07-23 05:18:00 +00:00
wj32 3e3b458759 system service hooking works!
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1624 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-07-22 07:59:06 +00:00
wj32 1f89c57334 improved KphUnsafeReadVirtualMemory
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1618 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-07-21 09:53:09 +00:00
wj32 2f51600da1 added KphOpenDirectoryObject
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1614 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-07-20 10:09:11 +00:00
wj32 bbdf6b3f49 added ability to unload drivers
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1613 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-07-20 09:45:43 +00:00
wj32 66333c166f added object/handle code to KPH
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1612 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-07-20 05:04:01 +00:00
wj32 9536b7ebbb moved some things around in KPH
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1472 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-06-26 11:51:10 +00:00
wj32 3d8e9894c2 Terminator test: TT4 (dangerous thread termination)
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1467 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-06-25 10:26:50 +00:00
wj32 afe6a1ed8e stack-walking improvements
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1455 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-06-23 09:56:25 +00:00
wj32 fe52a61b6b * kernel-mode stack traces!
* pool tag cleanup

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1439 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-06-20 23:41:17 +00:00
wj32 f98148bd1f * updated version information
* updated NPH with new functions and argument attributes
* fixed some KPH argument attributes
* fixed optional buffer support in KphQueryProcessHandles
* fixed NPH NtOpenProcessTokenEx hook

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1438 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-06-20 08:26:23 +00:00
wj32 a17e10d425 * added KphQueryProcessHandles
* added KphOpenThreadProcess
* hidden processes scanner can now detect FUTo
* KPH cleanup - added argument attributes
* improved auto-ForeColor

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1436 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-06-20 02:47:04 +00:00
wj32 10113a1831 added KphUnsafeReadVirtualMemory, fixed very rare BSOD
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1425 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-06-16 11:18:39 +00:00
wj32 0de2790f9c KPH code cleanup
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1288 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-05-17 04:40:24 +00:00
wj32 6eaaa3deb8 * added KphSetHandleGrantedAccess; KPH can finally bypass all protected process restrictions
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1254 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-05-09 11:57:47 +00:00
wj32 741af29084 * KProcessHacker can now perform process memory reading/writing by itself and does not require MmCopyVirtualMemory
* added KphAssignImpersonationToken
* added KphAcquireProcessRundownProtection and KphReleaseProcessRundownProtection
* added some impersonation code

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1226 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-05-03 07:03:02 +00:00
wj32 4dba651028 added ExpGetProcessInformation (not used yet)
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1116 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-04-21 09:01:12 +00:00
wj32 69a6811b71 added KphTerminateThread -> PspTerminateThreadByPointer
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1102 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-04-19 22:36:44 +00:00
wj32 22bf8a798e KphTerminateProcess now uses PsTerminateProcess where possible; if the wrong address is found it should not BSOD the system because the first 5 bytes are checked against the known standard function prologue.
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1099 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-04-19 09:51:04 +00:00
wj32 36d0d9299a * added new system for OS version-dependent data
* fixed GenericMapping offset for Windows XP

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1087 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-04-18 08:02:21 +00:00
wj32 fd789a3cbf * KphAttachProcess* functions
* improved handle viewing
* improved start addresses on Windows XP

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1085 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-04-18 02:52:10 +00:00
wj32 08854be5dd After 8 hours of debugging and 5 BSODs, nothing has been achieved :(
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1079 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-04-17 09:01:10 +00:00
wj32 5eccb86895 * reorganized KProcessHacker
* added KphDuplicateObject

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1078 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-04-17 02:29:25 +00:00