PsSetProcessHandleTracingInformation
NTSTATUS __stdcall PsSetProcessHandleTracingInformation(
_EX_RUNDOWN_REF *Process,
PROCESS_HANDLE_TRACING_ENABLE_EX *CapturedEnableInformation){
_HANDLE_TABLE *v4;
NTSTATUS v5;
NTSTATUS v6;
v4 = ObReferenceProcessHandleTable((_EPROCESS *)Process);
v5 = 0;
if( !v4 )
return -1073741558;
if( CapturedEnableInformation )
{
ExEnableHandleTracing(v4, CapturedEnableInformation->TotalSlots);
v5 = v6;
}
else
{
ExDisableHandleTracing(v4);
}
ExReleaseRundownProtection(Process + 139);
return v5;
}Referenced by:
NtSetInformationProcess
ViSettingsEnableKernelHandleChecking