wj32
53d7c69bb4
first 64-bit KPH build (version-specific info still needs to be fixed, and KProcessHacker.cs needs to be fixed as well)
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1715 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-08-15 05:43:33 +00:00
wj32
9eb0d23fc4
made further progress on system service logging; removed test code in kprocesshacker.c
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1625 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-07-22 10:24:26 +00:00
wj32
4f8aabf04f
added paged code sections to KPH
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1508 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-07-03 07:36:49 +00:00
wj32
3d8e9894c2
Terminator test: TT4 (dangerous thread termination)
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1467 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-06-25 10:26:50 +00:00
wj32
afe6a1ed8e
stack-walking improvements
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1455 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-06-23 09:56:25 +00:00
wj32
56b840f143
* code cleanup
...
* added GetPagefiles
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1446 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-06-21 03:59:28 +00:00
wj32
10c0f99030
small variable scope change
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1442 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-06-21 00:41:52 +00:00
wj32
8fb87d9a30
ps.c cleanup
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1441 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-06-21 00:19:22 +00:00
wj32
fe52a61b6b
* kernel-mode stack traces!
...
* pool tag cleanup
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1439 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-06-20 23:41:17 +00:00
wj32
f98148bd1f
* updated version information
...
* updated NPH with new functions and argument attributes
* fixed some KPH argument attributes
* fixed optional buffer support in KphQueryProcessHandles
* fixed NPH NtOpenProcessTokenEx hook
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1438 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-06-20 08:26:23 +00:00
wj32
a17e10d425
* added KphQueryProcessHandles
...
* added KphOpenThreadProcess
* hidden processes scanner can now detect FUTo
* KPH cleanup - added argument attributes
* improved auto-ForeColor
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1436 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-06-20 02:47:04 +00:00
wj32
2c3c8a402f
added ability to detach processes from debuggers
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1376 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-06-06 00:53:45 +00:00
wj32
b8f2e812ea
* fixed several Windows 7 offsets
...
* fixed auxData size leading to a buffer overflow
* better credits screen
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1325 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-05-24 01:32:16 +00:00
wj32
963ac8990e
added APC-related defs
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1319 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-05-22 10:52:53 +00:00
wj32
3812cfaab3
handle duplication is now protected (through object open hooks)
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1308 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-05-22 00:52:19 +00:00
wj32
c3625ea5fc
* changed error when terminating self to STATUS_CANT_TERMINATE_SELF
...
* fixed some outdated comments
* added lots of defs to NProcessHacker KPH
* added test program
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1297 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-05-19 08:25:38 +00:00
wj32
ac906ee65e
more ULONG_PTR usage in KPH
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1247 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-05-08 08:46:00 +00:00
wj32
30114f9047
added more comments to KProcessHacker
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1231 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-05-04 10:16:27 +00:00
wj32
741af29084
* KProcessHacker can now perform process memory reading/writing by itself and does not require MmCopyVirtualMemory
...
* added KphAssignImpersonationToken
* added KphAcquireProcessRundownProtection and KphReleaseProcessRundownProtection
* added some impersonation code
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1226 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-05-03 07:03:02 +00:00
wj32
5fbd0ba8b9
resurrected GUI thread highlighting which mysteriously disappeared recently
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1204 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-05-01 10:25:50 +00:00
wj32
8d2625dea8
fixed terminating own thread
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1103 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-04-19 22:53:47 +00:00
wj32
69a6811b71
added KphTerminateThread -> PspTerminateThreadByPointer
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1102 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-04-19 22:36:44 +00:00
wj32
1aaf0c4b2f
new KPH method: scans for PsTerminateProcess instead of using fixed offsets
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1101 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-04-19 11:26:44 +00:00
wj32
22bf8a798e
KphTerminateProcess now uses PsTerminateProcess where possible; if the wrong address is found it should not BSOD the system because the first 5 bytes are checked against the known standard function prologue.
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1099 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-04-19 09:51:04 +00:00
wj32
36d0d9299a
* added new system for OS version-dependent data
...
* fixed GenericMapping offset for Windows XP
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1087 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-04-18 08:02:21 +00:00
wj32
fd789a3cbf
* KphAttachProcess* functions
...
* improved handle viewing
* improved start addresses on Windows XP
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1085 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-04-18 02:52:10 +00:00
wj32
83ff30039b
new KPH I/O control: ZwQueryObject
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1080 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-04-17 11:45:17 +00:00
wj32
5eccb86895
* reorganized KProcessHacker
...
* added KphDuplicateObject
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1078 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-04-17 02:29:25 +00:00