Lines Matching defs:pNtChild
2911 PSUPDRVNTPROTECT pNtChild;
2912 int rc = supdrvNtProtectCreate(&pNtChild, hChildPid, kSupDrvNtProtectKind_VmProcessUnconfirmed, false /*fLink*/);
2915 pNtChild->fFirstProcessCreateHandle = true;
2916 pNtChild->fFirstThreadCreateHandle = true;
2917 pNtChild->fCsrssFirstProcessCreateHandle = true;
2918 pNtChild->cCsrssFirstProcessDuplicateHandle = ARCH_BITS == 32 ? 2 : 1;
2919 pNtChild->fThemesFirstProcessCreateHandle = true;
2920 pNtChild->hParentPid = pNtParent->AvlCore.Key;
2921 pNtChild->hCsrssPid = pNtParent->hCsrssPid;
2922 pNtChild->pCsrssProcess = pNtParent->pCsrssProcess;
2923 if (pNtChild->pCsrssProcess)
2924 ObReferenceObject(pNtChild->pCsrssProcess);
2932 bool fSuccess = RTAvlPVInsert(&g_NtProtectTree, &pNtChild->AvlCore);
2935 pNtParent->u.pChild = pNtChild; /* Parent keeps the initial reference. */
2937 pNtChild->u.pParent = pNtParent;
2947 pNtChild->enmProcessKind = kSupDrvNtProtectKind_VmProcessDead;
2950 supdrvNtProtectRelease(pNtChild);
2969 PSUPDRVNTPROTECT pNtChild = NULL;
2983 pNtChild = pNtProtect;
2993 pNtChild = pNtProtect->u.pChild;
2995 pNtChild->u.pParent = NULL;
2996 pNtChild->enmProcessKind = kSupDrvNtProtectKind_VmProcessDead;
3014 supdrvNtProtectRelease(pNtChild);