PsSetProcessHandleTracingInformation

NTSTATUS __stdcall PsSetProcessHandleTracingInformation(
        _EX_RUNDOWN_REF *Process,
        PROCESS_HANDLE_TRACING_ENABLE_EX *CapturedEnableInformation){
  _HANDLE_TABLE *v4; 
  NTSTATUS v5; 
  NTSTATUS v6; 

  v4 = ObReferenceProcessHandleTable((_EPROCESS *)Process);
  v5 = 0;
  if( !v4 )
    return -1073741558;
  if( CapturedEnableInformation )
  {
    ExEnableHandleTracing(v4, CapturedEnableInformation->TotalSlots);
    v5 = v6;
  }
  else
  {
    ExDisableHandleTracing(v4);
  }
  ExReleaseRundownProtection(Process + 139);
  return v5;
}

Referenced by:

NtSetInformationProcess
ViSettingsEnableKernelHandleChecking