This graph shows which files directly or indirectly include this file:

Macros
#define	PsGetCurrentProcess IoGetCurrentProcess

#define	_PSGETCURRENTTHREAD_

Functions
	$if (_WDMDDK_) NTKERNELAPI NTSTATUS NTAPI PsWrapApcWow64Thread(_Inout_ PVOID *ApcContext

	_IRQL_requires_max_ (DISPATCH_LEVEL) FORCEINLINE PETHREAD NTAPI PsGetCurrentThread(VOID)

	$endif (_WDMDDK_) $if(_NTDDK_) __kernel_entry NTSYSCALLAPI NTSTATUS NTAPI NtOpenProcess(_Out_ PHANDLE ProcessHandle

__kernel_entry NTSYSCALLAPI NTSTATUS NTAPI	NtQueryInformationProcess (_In_ HANDLE ProcessHandle, _In_ PROCESSINFOCLASS ProcessInformationClass, _Out_ PVOID ProcessInformation, _In_ ULONG ProcessInformationLength, _Out_opt_ PULONG ReturnLength)

	$endif (_NTDDK_) $if(_NTIFS_) _Must_inspect_result_ _IRQL_requires_max_(APC_LEVEL) NTKERNELAPI NTSTATUS NTAPI PsLookupProcessByProcessId(_In_ HANDLE ProcessId

_Must_inspect_result_	_IRQL_requires_max_ (APC_LEVEL) NTKERNELAPI NTSTATUS NTAPI PsLookupThreadByThreadId(_In_ HANDLE UniqueThreadId

	$endif (_NTIFS_) $if(_WDMDDK_) _IRQL_requires_max_(APC_LEVEL) _Post_satisfies_(return< =0) _Must_inspect_result_ NTKERNELAPI NTSTATUS NTAPI PsCreateSystemThread(_Out_ PHANDLE ThreadHandle

_In_ ULONG _In_opt_ POBJECT_ATTRIBUTES _In_opt_ HANDLE _Out_opt_ PCLIENT_ID _In_ PKSTART_ROUTINE _In_opt_	_When_ (return==0, __drv_aliasesMem) PVOID StartContext)

	_IRQL_requires_max_ (PASSIVE_LEVEL) NTKERNELAPI NTSTATUS NTAPI PsTerminateSystemThread(_In_ NTSTATUS ExitStatus)

NTKERNELAPI HANDLE NTAPI	PsGetCurrentProcessId (VOID)

NTKERNELAPI BOOLEAN NTAPI	PsGetVersion (OUT PULONG MajorVersion OPTIONAL, OUT PULONG MinorVersion OPTIONAL, OUT PULONG BuildNumber OPTIONAL, OUT PUNICODE_STRING CSDVersion OPTIONAL)

NTKERNELAPI PEPROCESS NTAPI	PsGetThreadProcess (_In_ PETHREAD Thread)

NTKERNELAPI NTSTATUS NTAPI	PsRemoveCreateThreadNotifyRoutine (_In_ PCREATE_THREAD_NOTIFY_ROUTINE NotifyRoutine)

NTKERNELAPI BOOLEAN NTAPI	PsIsSystemThread (_In_ PETHREAD Thread)

NTKERNELAPI BOOLEAN NTAPI	PsSetCurrentThreadPrefetching (IN BOOLEAN Prefetching)

NTKERNELAPI BOOLEAN NTAPI	PsIsCurrentThreadPrefetching (VOID)

NTKERNELAPI NTSTATUS NTAPI	PsSetCreateProcessNotifyRoutineEx (IN PCREATE_PROCESS_NOTIFY_ROUTINE_EX NotifyRoutine, IN BOOLEAN Remove)

Variables
_Inout_ PVOID *	ApcRoutine

_In_ ACCESS_MASK	DesiredAccess

_In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES	ObjectAttributes

_In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _In_opt_ PCLIENT_ID	ClientId

_Outptr_ PEPROCESS *	Process

_Must_inspect_result_ _Outptr_ PETHREAD *	Thread

_In_ ULONG _In_opt_ POBJECT_ATTRIBUTES _In_opt_ HANDLE	ProcessHandle

_In_ ULONG _In_opt_ POBJECT_ATTRIBUTES _In_opt_ HANDLE _Out_opt_ PCLIENT_ID _In_ PKSTART_ROUTINE	StartRoutine

_In_ BOOLEAN	Remove

_Out_ PBOOLEAN	CopyOnOpen

_Out_ PBOOLEAN _Out_ PBOOLEAN	EffectiveOnly

_Out_ PBOOLEAN _Out_ PBOOLEAN _Out_ PSECURITY_IMPERSONATION_LEVEL	ImpersonationLevel

_Must_inspect_result_ _In_opt_ PACCESS_TOKEN	Token

_Inout_ PSE_IMPERSONATION_STATE	ImpersonationState

_In_ POOL_TYPE	PoolType

_In_ POOL_TYPE _In_ ULONG_PTR	Amount

Macro Definition Documentation

#define _PSGETCURRENTTHREAD_

Definition at line 20 of file psfuncs.h.

#define PsGetCurrentProcess IoGetCurrentProcess

Definition at line 17 of file psfuncs.h.

Referenced by _Function_class_(), _IRQL_requires_max_(), _MiWriteBackPage(), AdvancedErrorChecks(), CdFastIoCheckIfPossible(), CmInitSystem1(), CsrClientCallServer(), DbgkCreateThread(), DbgkExitProcess(), DbgkExitThread(), DbgkForwardException(), DbgkMapViewOfSection(), DbgkpOpenHandles(), DbgkpSendApiMessage(), DbgkpSendApiMessageLpc(), DbgkpSuspendProcess(), DbgkUnMapViewOfSection(), DriverEntry(), EngUnmapSectionView(), ExAllocatePoolWithQuotaTag(), ExpAllocateHandleTable(), ExpInitNls(), ExpRaiseHardError(), ExpWin32SessionCallout(), Ext2FastIoCheckIfPossible(), fast_io_check_if_possible(), FatiClose(), FFSFastIoCheckIfPossible(), GDI_CleanupForProcess(), InitCsrProcess(), IntAttachToCSRSS(), intDdCreateDirectDrawLocal(), IntFixWindowCoordinates(), IntGetDesktopObjectHandle(), IntMapDesktopView(), IntUnmapDesktopView(), IntUserHeapCreate(), IntVideoPortDispatchOpen(), IopLoadUnloadDriver(), IopLoadUnloadDriverWorker(), IopUpdateOperationCount(), IopUpdateTransferCount(), KdbEnterDebuggerException(), KdbpAttachToThread(), KdbpOverwriteInstruction(), KdbpSymFindModule(), KdbSymPrintAddress(), KdpGdbEnterDebuggerException(), Ke386CallBios(), KeContextToTrapFrame(), KiDispatchException(), KiTrap06Handler(), KiTrap0DHandler(), KiVdmTrap(), KsecGetKeyData(), LpcpCopyRequestData(), LpcpCreatePort(), LpcpDeletePort(), MiBalancerThread(), MiCheckForUserStackOverflow(), MiCopyFromUserPage(), MiCopyPageToPage(), MiCreatePagingFileMap(), MiDeleteVirtualAddresses(), MiDereferenceSession(), MiFillSystemPageDirectory(), MiGetPageProtection(), MiGetPageTableForProcess(), MiGetPteForProcess(), MiInitializeLargePageSupport(), MiInitializePageTable(), MiInitializePfn(), MiInitMachineDependent(), MiInsertPageInList(), MiInsertVadEx(), MiLoadImageSection(), MiLocateAddress(), MiLockVirtualMemory(), MiMapLockedPagesInUserSpace(), MiMapPageInHyperSpace(), MiQueryMemoryBasicInformation(), MiReadFilePage(), MiReadPage(), MiRosCleanupMemoryArea(), MiSessionAddProcess(), MiSessionCommitPageTables(), MiSessionCreateInternal(), MiSessionRemoveProcess(), MiUnlockVirtualMemory(), MiUnmapLockedPagesInUserSpace(), MiUnmapPageInHyperSpace(), MiUnmapViewOfSection(), MiZeroPhysicalPage(), MmAccessFaultCacheSection(), MmAdjustWorkingSetSize(), MmArmAccessFault(), MmCommitSessionMappedView(), MmCopyVirtualMemory(), MmCreateKernelStack(), MmCreateVirtualMappingUnsafe(), MmDeletePageTable(), MmFreeMemoryArea(), MmFreePageTable(), MmGetExecuteOptions(), MmGetImageInformation(), MmGetPageTableForProcess(), MmGetPageTableForProcessForPAE(), MmGetSessionLocaleId(), MmGrowKernelStackEx(), MmInitializeHandBuiltProcess(), MmInsertMemoryArea(), MmLoadSystemImage(), MmMapViewInSessionSpace(), MmMapViewOfArm3Section(), MmNotPresentFault(), MmNotPresentFaultCacheSection(), MmpAccessFault(), MmProbeAndLockPages(), MmpSectionAccessFaultInner(), MmSessionCreate(), MmSessionDelete(), MmSetExecuteOptions(), MmUnmapViewInSessionSpace(), NtAcceptConnectPort(), NtAllocateVirtualMemory(), NtCloseObjectAuditAlarm(), NtCreateJobObject(), NtDebugActiveProcess(), NtFreeVirtualMemory(), NtGetWriteWatch(), NtLockFile(), NtLockVirtualMemory(), NtMapViewOfSection(), NtProtectVirtualMemory(), NtQueryInformationProcess(), NtReadVirtualMemory(), NtResetWriteWatch(), NtSecureConnectPort(), NtSetDefaultHardErrorPort(), NtSetInformationObject(), NtSetInformationThread(), NtSetLdtEntries(), NtSetSystemPowerState(), NtSetTimerResolution(), NtTerminateProcess(), NtTerminateThread(), NtUnlockFile(), NtUnlockVirtualMemory(), NtUserCallOneParam(), NtUserConsoleControl(), NtUserGetThreadDesktop(), NtUserQueryInformationThread(), NtUserResolveDesktop(), NtUserSetInformationThread(), NtUserSetShellWindowEx(), NtUserSetThreadDesktop(), NtUserSetWindowsHookEx(), NtWaitForMultipleObjects(), NtWriteVirtualMemory(), ObClearProcessHandleTable(), ObDuplicateObject(), ObInitSystem(), ObpAllocateObject(), ObpChargeQuotaForObject(), ObpCloseHandle(), ObpCloseHandleTableEntry(), ObpCreateDeviceMap(), ObpCreateHandle(), ObpCreateUnnamedHandle(), ObpIncrementHandleCount(), ObpIncrementUnnamedHandleCount(), ObQueryObjectAuditingByHandle(), ObReferenceObjectByHandle(), ObSetHandleAttributes(), PsConvertToGuiThread(), PsGetCurrentProcessId(), PsGetCurrentProcessSessionId(), PsGetCurrentProcessWin32Process(), PsGetProcessExitTime(), PsInitializeQuotaSystem(), PsLocateSystemDll(), PspCreateProcess(), PspCreateThread(), PspInitPhase0(), ReadMemorySendHandler(), RfsdFastIoCheckIfPossible(), RxFastIoCheckIfPossible(), SeCaptureSubjectContext(), SeCreateAccessState(), SeIsTokenChild(), SepInitializationPhase0(), SepInitializationPhase1(), SeReleaseSubjectContext(), SystemTimerSet(), TestPoolQuota(), UDFFastIoCheckIfPossible(), UserCreateMenu(), UserGetShellWindow(), VideoPortInt10(), and WriteMemorySendHandler().

Function Documentation

$endif ( _WDMDDK_ )

Definition at line 202 of file ke.h.

 {
     ULONGLONG Low;
     LONGLONG High;
 } NEON128, *PNEON128;

$endif ( _NTDDK_ )

Definition at line 2487 of file iofuncs.h.

 {
     PriorityInfo->Size = sizeof(IO_PRIORITY_INFO);
     PriorityInfo->ThreadPriority = 0xffff;
     PriorityInfo->IoPriority = IoPriorityNormal;
     PriorityInfo->PagePriority = 0;
 }

$endif ( _NTIFS_ )

pure virtual

Definition at line 2594 of file iofuncs.h.

 {
   ASSERT(Irp->CurrentLocation <= Irp->StackCount);
   Irp->CurrentLocation++;
 #ifdef NONAMELESSUNION
   Irp->Tail.Overlay.s.u.CurrentStackLocation++;
 #else
   Irp->Tail.Overlay.CurrentStackLocation++;
 #endif
 }

$if ( _WDMDDK_ )

Kernel definitions for AMD64

Kernel definitions for ARM

Definition at line 1 of file ke.h.

 {
     ULONG Dummy;
 } KFLOATING_SAVE, *PKFLOATING_SAVE;

_IRQL_requires_max_ ( DISPATCH_LEVEL )

Definition at line 21 of file psfuncs.h.

 {
   return (PETHREAD)KeGetCurrentThread();
 }

_Must_inspect_result_ _IRQL_requires_max_ ( APC_LEVEL )

_IRQL_requires_max_ ( PASSIVE_LEVEL )

Definition at line 37 of file Messaging.c.

 {
     PFLT_SERVER_PORT_OBJECT PortObject;
     NTSTATUS Status;
 
     /* The caller must allow at least one connection */
     if (MaxConnections == 0)
     {
         return STATUS_INVALID_PARAMETER;
     }
 
     /* The request must be for a kernel handle */
     if (!(ObjectAttributes->Attributes & OBJ_KERNEL_HANDLE))
     {
         return STATUS_INVALID_PARAMETER;
     }
 
     /*
      * Get rundown protection on the target to stop the owner
      * from unloading whilst this port object is open. It gets
      * removed in the FltpServerPortClose callback
      */
     Status = FltObjectReference(Filter);
     if (!NT_SUCCESS(Status))
     {
         return Status;
     }
 
     /* Create our new server port object */
     Status = ObCreateObject(0,
                             ServerPortObjectType,
                             ObjectAttributes,
                             KernelMode,
                             NULL,
                             sizeof(FLT_SERVER_PORT_OBJECT),
                             0,
                             0,
                             (PVOID *)&PortObject);
     if (NT_SUCCESS(Status))
     {
         /* Zero out the struct */
         RtlZeroMemory(PortObject, sizeof(FLT_SERVER_PORT_OBJECT));
 
         /* Increment the ref count on the target filter */
         FltpObjectPointerReference((PFLT_OBJECT)Filter);
 
         /* Setup the filter port object */
         PortObject->Filter = Filter;
         PortObject->ConnectNotify = ConnectNotifyCallback;
         PortObject->DisconnectNotify = DisconnectNotifyCallback;
         PortObject->MessageNotify = MessageNotifyCallback;
         PortObject->Cookie = ServerPortCookie;
         PortObject->MaxConnections = MaxConnections;
 
         /* Insert the object */
         Status = ObInsertObject(PortObject,
                                 NULL,
                                 STANDARD_RIGHTS_ALL | FILE_READ_DATA,
                                 0,
                                 NULL,
                                 (PHANDLE)ServerPort);
         if (NT_SUCCESS(Status))
         {
             /* Lock the connection list */
             ExAcquireFastMutex(&Filter->ConnectionList.mLock);
 
             /* Add the new port object to the connection list and increment the count */
             InsertTailList(&Filter->ConnectionList.mList, &PortObject->FilterLink);
             Filter->ConnectionList.mCount++;
 
             /* Unlock the connection list*/
             ExReleaseFastMutex(&Filter->ConnectionList.mLock);
         }
     }
 
     if (!NT_SUCCESS(Status))
     {
         /* Allow the filter to be cleaned up */
         FltObjectDereference(Filter);
     }
 
     return STATUS_NOT_IMPLEMENTED;
 }

_In_ ULONG _In_opt_ POBJECT_ATTRIBUTES _In_opt_ HANDLE _Out_opt_ PCLIENT_ID _In_ PKSTART_ROUTINE _In_opt_ _When_	(	return	= `=0`,
		__drv_aliasesMem
	)

__kernel_entry NTSYSCALLAPI NTSTATUS NTAPI NtQueryInformationProcess	(	_In_ HANDLE	ProcessHandle,
		_In_ PROCESSINFOCLASS	ProcessInformationClass,
		_Out_ PVOID	ProcessInformation,
		_In_ ULONG	ProcessInformationLength,
		_Out_opt_ PULONG	ReturnLength
	)

NTKERNELAPI HANDLE NTAPI PsGetCurrentProcessId ( VOID )

Definition at line 1123 of file process.c.

Referenced by CheckWinstaAttributeAccess(), CmpCreateRegistryRoot(), CmpDoCreateChild(), CmpDoOpen(), CreateProcessNotifyRoutine(), CreateThreadNotifyRoutine(), DbgP(), DdHmgAlloc(), DesktopWindowProc(), ENTRY_ReferenceEntryByHandle(), ExpLoadBootSymbols(), FltpCreate(), GDI_CleanupForProcess(), GDIOBJ_hInsertObject(), GDIOBJ_vDereferenceObject(), GDIOBJ_vSetObjectOwner(), GreGetObjectOwner(), handle_gdb_read_mem(), handle_gdb_write_mem(), KdInitSystem(), KsecGatherEntropyData(), LpcpDeletePort(), MmLoadSystemImage(), MmUnloadSystemImage(), NtUserLockWindowStation(), NtUserSetLogonNotifyWindow(), NtUserSetWindowStationUser(), NtUserSwitchDesktop(), NtUserUnlockWindowStation(), ObpAllocateObject(), print_error(), ReadMemorySendHandler(), VerifyObjectOwner(), and WriteMemorySendHandler().

 {
     return (HANDLE)PsGetCurrentProcess()->UniqueProcessId;
 }

NTKERNELAPI PEPROCESS NTAPI PsGetThreadProcess ( _In_ PETHREAD Thread )

NTKERNELAPI BOOLEAN NTAPI PsGetVersion	(	OUT PULONG MajorVersion	OPTIONAL,
		OUT PULONG MinorVersion	OPTIONAL,
		OUT PULONG BuildNumber	OPTIONAL,
		OUT PUNICODE_STRING CSDVersion	OPTIONAL
	)

Definition at line 660 of file psmgr.c.

 {
     if (MajorVersion) *MajorVersion = NtMajorVersion;
     if (MinorVersion) *MinorVersion = NtMinorVersion;
     if (BuildNumber ) *BuildNumber  = NtBuildNumber & 0x3FFF;
 
     if (CSDVersion)
     {
         CSDVersion->Length = CmCSDVersionString.Length;
         CSDVersion->MaximumLength = CmCSDVersionString.MaximumLength;
         CSDVersion->Buffer = CmCSDVersionString.Buffer;
     }
 
     /* Return TRUE if this is a Checked Build */
     return (NtBuildNumber >> 28) == 0xC;
 }