Data Structures |
| struct | PGET_SET_CTX_CONTEXT |
Defines |
| #define | _PS_DEBUG_ 0x00 |
| #define | PS_THREAD_DEBUG 0x01 |
| #define | PS_PROCESS_DEBUG 0x02 |
| #define | PS_SECURITY_DEBUG 0x04 |
| #define | PS_JOB_DEBUG 0x08 |
| #define | PS_NOTIFICATIONS_DEBUG 0x10 |
| #define | PS_WIN32K_DEBUG 0x20 |
| #define | PS_STATE_DEBUG 0x40 |
| #define | PS_QUOTA_DEBUG 0x80 |
| #define | PS_KILL_DEBUG 0x100 |
| #define | PS_REF_DEBUG 0x200 |
| #define | PSTRACE(x, fmt,...) DPRINT(fmt, ##__VA_ARGS__) |
| #define | PSREFTRACE(x) |
| #define | PSP_MAX_CREATE_THREAD_NOTIFY 8 |
| #define | PSP_MAX_LOAD_IMAGE_NOTIFY 8 |
| #define | PSP_MAX_CREATE_PROCESS_NOTIFY 8 |
| #define | PSP_JOB_SCHEDULING_CLASSES 10 |
Functions |
| VOID NTAPI | PspShutdownProcessManager (VOID) |
| BOOLEAN NTAPI | PsInitSystem (IN PLOADER_PARAMETER_BLOCK LoaderBlock) |
| PETHREAD NTAPI | PsGetNextProcessThread (IN PEPROCESS Process, IN PETHREAD Thread OPTIONAL) |
| PEPROCESS NTAPI | PsGetNextProcess (IN PEPROCESS OldProcess OPTIONAL) |
| NTSTATUS NTAPI | PspMapSystemDll (IN PEPROCESS Process, OUT PVOID *DllBase, IN BOOLEAN UseLargePages) |
| NTSTATUS NTAPI | PsLocateSystemDll (VOID) |
| NTSTATUS NTAPI | PspGetSystemDllEntryPoints (VOID) |
| VOID NTAPI | PsChangeQuantumTable (IN BOOLEAN Immediate, IN ULONG PrioritySeparation) |
| NTSTATUS NTAPI | PsReferenceProcessFilePointer (IN PEPROCESS Process, OUT PFILE_OBJECT *FileObject) |
| NTSTATUS NTAPI | PspCreateProcess (OUT PHANDLE ProcessHandle, IN ACCESS_MASK DesiredAccess, IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL, IN HANDLE ParentProcess OPTIONAL, IN ULONG Flags, IN HANDLE SectionHandle OPTIONAL, IN HANDLE DebugPort OPTIONAL, IN HANDLE ExceptionPort OPTIONAL, IN BOOLEAN InJob) |
| PACCESS_TOKEN NTAPI | PsReferenceEffectiveToken (IN PETHREAD Thread, OUT PTOKEN_TYPE TokenType, OUT PUCHAR b, OUT PSECURITY_IMPERSONATION_LEVEL Level) |
| NTSTATUS NTAPI | PsOpenTokenOfProcess (IN HANDLE ProcessHandle, OUT PACCESS_TOKEN *Token) |
| NTSTATUS NTAPI | PspSetPrimaryToken (IN PEPROCESS Process, IN HANDLE TokenHandle OPTIONAL, IN PACCESS_TOKEN Token OPTIONAL) |
| NTSTATUS NTAPI | PspInitializeProcessSecurity (IN PEPROCESS Process, IN PEPROCESS Parent OPTIONAL) |
| VOID NTAPI | PspDeleteProcessSecurity (IN PEPROCESS Process) |
| VOID NTAPI | PspDeleteThreadSecurity (IN PETHREAD Thread) |
| VOID NTAPI | PsExitSpecialApc (PKAPC Apc, PKNORMAL_ROUTINE *NormalRoutine, PVOID *NormalContext, PVOID *SystemArgument1, PVOID *SystemArgument2) |
| VOID NTAPI | PspReapRoutine (IN PVOID Context) |
| VOID NTAPI | PspExitThread (IN NTSTATUS ExitStatus) |
| NTSTATUS NTAPI | PspTerminateThreadByPointer (IN PETHREAD Thread, IN NTSTATUS ExitStatus, IN BOOLEAN bSelf) |
| VOID NTAPI | PspExitProcess (IN BOOLEAN LastThread, IN PEPROCESS Process) |
| NTSTATUS NTAPI | PsTerminateProcess (IN PEPROCESS Process, IN NTSTATUS ExitStatus) |
| VOID NTAPI | PspDeleteProcess (IN PVOID ObjectBody) |
| VOID NTAPI | PspDeleteThread (IN PVOID ObjectBody) |
| VOID NTAPI | PspSystemThreadStartup (PKSTART_ROUTINE StartRoutine, PVOID StartContext) |
| VOID NTAPI | PsIdleThreadMain (IN PVOID Context) |
| VOID NTAPI | PspInheritQuota (IN PEPROCESS Process, IN PEPROCESS ParentProcess) |
| VOID NTAPI | PspDestroyQuotaBlock (IN PEPROCESS Process) |
| VOID NTAPI | PspExitProcessFromJob (IN PEJOB Job, IN PEPROCESS Process) |
| VOID NTAPI | PspRemoveProcessFromJob (IN PEPROCESS Process, IN PEJOB Job) |
| VOID NTAPI | PspInitializeJobStructures (VOID) |
| VOID NTAPI | PspDeleteJob (IN PVOID ObjectBody) |
| NTSTATUS NTAPI | PsResumeThread (IN PETHREAD Thread, OUT PULONG PreviousCount OPTIONAL) |
| NTSTATUS NTAPI | PsSuspendThread (IN PETHREAD Thread, OUT PULONG PreviousCount OPTIONAL) |
| VOID NTAPI | PspGetOrSetContextKernelRoutine (IN PKAPC Apc, IN OUT PKNORMAL_ROUTINE *NormalRoutine, IN OUT PVOID *NormalContext, IN OUT PVOID *SystemArgument1, IN OUT PVOID *SystemArgument2) |
| NTSTATUS NTAPI | PsReturnProcessPageFileQuota (IN PEPROCESS Process, IN SIZE_T Amount) |
| NTSTATUS NTAPI | PsChargeProcessPageFileQuota (IN PEPROCESS Process, IN SIZE_T Amount) |
| BOOLEAN NTAPI | PspIsProcessExiting (IN PEPROCESS Process) |
Variables |
| ULONG | PspTraceLevel |
| LCID | PsDefaultThreadLocaleId |
| LCID | PsDefaultSystemLocaleId |
| LIST_ENTRY | PspReaperListHead |
| WORK_QUEUE_ITEM | PspReaperWorkItem |
| BOOLEAN | PspReaping |
| PEPROCESS | PsIdleProcess |
| LIST_ENTRY | PsActiveProcessHead |
| KGUARDED_MUTEX | PspActiveProcessMutex |
| LARGE_INTEGER | ShortPsLockDelay |
| EPROCESS_QUOTA_BLOCK | PspDefaultQuotaBlock |
| PHANDLE_TABLE | PspCidTable |
| EX_CALLBACK | PspThreadNotifyRoutine [PSP_MAX_CREATE_THREAD_NOTIFY] |
| EX_CALLBACK | PspProcessNotifyRoutine [PSP_MAX_CREATE_PROCESS_NOTIFY] |
| EX_CALLBACK | PspLoadImageNotifyRoutine [PSP_MAX_LOAD_IMAGE_NOTIFY] |
| PLEGO_NOTIFY_ROUTINE | PspLegoNotifyRoutine |
| ULONG | PspThreadNotifyRoutineCount |
| ULONG | PspProcessNotifyRoutineCount |
| BOOLEAN | PsImageNotifyEnabled |
| PKWIN32_PROCESS_CALLOUT | PspW32ProcessCallout |
| PKWIN32_THREAD_CALLOUT | PspW32ThreadCallout |
| PVOID | PspSystemDllEntryPoint |
| PVOID | PspSystemDllBase |
| BOOLEAN | PspUseJobSchedulingClasses |
| CHAR | PspJobSchedulingClasses [PSP_JOB_SCHEDULING_CLASSES] |
| ULONG | PsRawPrioritySeparation |
| POBJECT_TYPE | _PsThreadType |
| POBJECT_TYPE | _PsProcessType |
| PTOKEN | PspBootAccessToken |
| GENERIC_MAPPING | PspJobMapping |
| POBJECT_TYPE | PsJobType |
| UNICODE_STRING | PsNtDllPathName |
| LIST_ENTRY | PsLoadedModuleList |
| KSPIN_LOCK | PsLoadedModuleSpinLock |
| ERESOURCE | PsLoadedModuleResource |
| ULONG_PTR | PsNtosImageBase |
1.7.6.1
