Lines Matching defs:pProcess
2275 * @param pProcess The process to check.
2278 static bool supdrvNtProtectIsSystem32ProcessMatch(PEPROCESS pProcess, const char *pszName)
2285 const char *pszImageFile = (const char *)PsGetProcessImageFileName(pProcess);
2298 NTSTATUS rcNt = g_pfnPsReferenceProcessFilePointer(pProcess, &pFile);
2351 * @param pProcess The process.
2353 static bool supdrvNtProtectIsCsrssByProcess(PEPROCESS pProcess)
2360 if (!g_pfnPsIsProtectedProcessLight(pProcess))
2367 if (!supdrvNtProtectIsSystem32ProcessMatch(pProcess, "csrss.exe"))
2685 PEPROCESS pProcess;
2686 rcNt = PsLookupProcessByProcessId(pProcInfo->UniqueProcessId, &pProcess);
2689 if (supdrvNtProtectIsCsrssByProcess(pProcess))
2691 if (PsGetProcessSessionId(pProcess) == uSessionId)
2704 fThatsIt = *ppPortProc == pProcess;
2718 pNtProtect->pCsrssProcess = pProcess;
2725 ObDereferenceObject(pProcess);
2794 * @param pProcess The process to check.
2796 static bool supdrvNtProtectIsWhitelistedDebugger(PEPROCESS pProcess)
2798 const char *pszImageFile = (const char *)PsGetProcessImageFileName(pProcess);
3484 PEPROCESS pProcess = IoThreadToProcess((PETHREAD)pOpInfo->Object);
3485 PSUPDRVNTPROTECT pNtProtect = supdrvNtProtectLookup(PsGetProcessId(pProcess));
3495 if (pProcess == PsGetCurrentProcess())
3572 if ( pProcess == PsGetCurrentProcess()
3573 && (PEPROCESS)pOpInfo->Parameters->DuplicateHandleInformation.TargetProcess == pProcess)