mirror of
https://github.com/mirror/processhacker
synced 2026-06-08 16:03:24 +00:00
wj32
3d8e9894c2
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1467 21ef857c-d57f-4fe0-8362-d861dc6d29cd
147 lines
4.0 KiB
C
147 lines
4.0 KiB
C
/*
|
|
* Process Hacker Driver -
|
|
* processes and threads
|
|
*
|
|
* Copyright (C) 2009 wj32
|
|
*
|
|
* This file is part of Process Hacker.
|
|
*
|
|
* Process Hacker is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation, either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* Process Hacker is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with Process Hacker. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
#ifndef _PS_H
|
|
#define _PS_H
|
|
|
|
#include "types.h"
|
|
#include "ex.h"
|
|
#include "mm.h"
|
|
#include "ob.h"
|
|
#include "se.h"
|
|
|
|
#define TAG_CAPTURE_STACK_BACKTRACE ('tShP')
|
|
|
|
#define PROCESS_TERMINATE (0x0001)
|
|
#define PROCESS_CREATE_THREAD (0x0002)
|
|
#define PROCESS_SET_SESSIONID (0x0004)
|
|
#define PROCESS_VM_OPERATION (0x0008)
|
|
#define PROCESS_VM_READ (0x0010)
|
|
#define PROCESS_VM_WRITE (0x0020)
|
|
#define PROCESS_DUP_HANDLE (0x0040)
|
|
#define PROCESS_CREATE_PROCESS (0x0080)
|
|
#define PROCESS_SET_QUOTA (0x0100)
|
|
#define PROCESS_SET_INFORMATION (0x0200)
|
|
#define PROCESS_QUERY_INFORMATION (0x0400)
|
|
#define PROCESS_SUSPEND_RESUME (0x0800)
|
|
#define PROCESS_QUERY_LIMITED_INFORMATION (0x1000)
|
|
#ifndef PROCESS_ALL_ACCESS
|
|
#define PROCESS_ALL_ACCESS (STANDARD_RIGHTS_REQUIRED | SYNCHRONIZE | 0xffff)
|
|
#endif
|
|
|
|
#define THREAD_TERMINATE (0x0001)
|
|
#define THREAD_SUSPEND_RESUME (0x0002)
|
|
#define THREAD_ALERT (0x0004)
|
|
#define THREAD_GET_CONTEXT (0x0008)
|
|
#define THREAD_SET_CONTEXT (0x0010)
|
|
#define THREAD_SET_INFORMATION (0x0020)
|
|
#define THREAD_QUERY_INFORMATION (0x0040)
|
|
#define THREAD_SET_THREAD_TOKEN (0x0080)
|
|
#define THREAD_IMPERSONATE (0x0100)
|
|
#define THREAD_DIRECT_IMPERSONATION (0x0200)
|
|
#ifndef THREAD_ALL_ACCESS
|
|
#define THREAD_ALL_ACCESS (STANDARD_RIGHTS_REQUIRED | SYNCHRONIZE | 0x3ff)
|
|
#endif
|
|
|
|
#define JOB_OBJECT_ASSIGN_PROCESS (0x0001)
|
|
#define JOB_OBJECT_SET_ATTRIBUTES (0x0002)
|
|
#define JOB_OBJECT_QUERY (0x0004)
|
|
#define JOB_OBJECT_TERMINATE (0x0008)
|
|
#define JOB_OBJECT_SET_SECURITY_ATTRIBUTES (0x0010)
|
|
#define JOB_OBJECT_ALL_ACCESS (STANDARD_RIGHTS_REQUIRED | SYNCHRONIZE | 0x1f)
|
|
|
|
extern POBJECT_TYPE *PsJobType;
|
|
|
|
typedef struct _CAPTURE_BACKTRACE_THREAD_CONTEXT
|
|
{
|
|
BOOLEAN Local;
|
|
KAPC Apc;
|
|
KEVENT CompletedEvent;
|
|
ULONG FramesToSkip;
|
|
ULONG FramesToCapture;
|
|
PVOID *BackTrace;
|
|
ULONG CapturedFrames;
|
|
ULONG BackTraceHash;
|
|
} CAPTURE_BACKTRACE_THREAD_CONTEXT, *PCAPTURE_BACKTRACE_THREAD_CONTEXT;
|
|
|
|
typedef struct _EXIT_THREAD_CONTEXT
|
|
{
|
|
KAPC Apc;
|
|
KEVENT CompletedEvent;
|
|
NTSTATUS ExitStatus;
|
|
} EXIT_THREAD_CONTEXT, *PEXIT_THREAD_CONTEXT;
|
|
|
|
/* FUNCTION DEFS */
|
|
|
|
NTSTATUS NTAPI PsGetContextThread(
|
|
__in PETHREAD Thread,
|
|
__inout PCONTEXT ThreadContext,
|
|
__in KPROCESSOR_MODE PreviousMode
|
|
);
|
|
|
|
PVOID NTAPI PsGetThreadWin32Thread(
|
|
__in PETHREAD Thread
|
|
);
|
|
|
|
NTSTATUS NTAPI PsLookupProcessThreadByCid(
|
|
__in PCLIENT_ID ClientId,
|
|
__out_opt PEPROCESS *Process,
|
|
__out PETHREAD *Thread
|
|
);
|
|
|
|
NTSTATUS NTAPI PsSetContextThread(
|
|
__in PETHREAD Thread,
|
|
__in PCONTEXT ThreadContext,
|
|
__in KPROCESSOR_MODE PreviousMode
|
|
);
|
|
|
|
/* FUNCTION TYPEDEFS */
|
|
|
|
typedef PVOID (NTAPI *_PsGetProcessJob)(
|
|
PEPROCESS Process
|
|
);
|
|
|
|
typedef NTSTATUS (NTAPI *_PsResumeProcess)(
|
|
PEPROCESS Process
|
|
);
|
|
|
|
typedef NTSTATUS (NTAPI *_PsSuspendProcess)(
|
|
PEPROCESS Process
|
|
);
|
|
|
|
typedef NTSTATUS (NTAPI *_PsTerminateProcess)(
|
|
PEPROCESS Process,
|
|
NTSTATUS ExitStatus
|
|
);
|
|
|
|
typedef NTSTATUS (NTAPI *_PspTerminateThreadByPointer51)(
|
|
PETHREAD Thread,
|
|
NTSTATUS ExitStatus
|
|
);
|
|
|
|
typedef NTSTATUS (NTAPI *_PspTerminateThreadByPointer60)(
|
|
PETHREAD Thread,
|
|
NTSTATUS ExitStatus,
|
|
BOOLEAN DirectTerminate
|
|
);
|
|
|
|
#endif |