Beispiel #1
0
 public IntPtr AddPreviousModeRule(FilterType filterType, KProcessorMode previousMode)
 {
     return(KProcessHacker.Instance.SsAddPreviousModeRule(
                _ruleSetEntryHandle,
                filterType.ToKphSs(),
                previousMode
                ));
 }
Beispiel #2
0
 public IntPtr AddPreviousModeRule(FilterType filterType, KProcessorMode previousMode)
 {
     return KProcessHacker.Instance.SsAddPreviousModeRule(
         _ruleSetEntryHandle,
         filterType.ToKphSs(),
         previousMode
         );
 }
Beispiel #3
0
        public IntPtr SsAddPreviousModeRule(
            KphSsRuleSetEntryHandle ruleSetEntryHandle,
            KphSsFilterType filterType,
            KProcessorMode previousMode
            )
        {
            byte *inData  = stackalloc byte[0x9];
            byte *outData = stackalloc byte[4];

            *(int *)inData          = ruleSetEntryHandle.Handle.ToInt32();
            *(int *)(inData + 0x4)  = (int)filterType;
            *(byte *)(inData + 0x8) = (byte)previousMode;

            _fileHandle.IoControl(CtlCode(Control.SsAddPreviousModeRule), inData, 0x9, outData, 4);

            return((*(int *)outData).ToIntPtr());
        }
        public IntPtr SsAddPreviousModeRule(
            KphSsRuleSetEntryHandle ruleSetEntryHandle,
            KphSsFilterType filterType,
            KProcessorMode previousMode
            )
        {
            byte* inData = stackalloc byte[0x9];
            byte* outData = stackalloc byte[4];

            *(int*)inData = ruleSetEntryHandle.Handle.ToInt32();
            *(int*)(inData + 0x4) = (int)filterType;
            *(byte*)(inData + 0x8) = (byte)previousMode;

            _fileHandle.IoControl(CtlCode(Control.SsAddPreviousModeRule), inData, 0x9, outData, 4);

            return (*(int*)outData).ToIntPtr();
        }