INT NTAPI PhpObjectHandleCompareFunction( _In_ PVOID Item1, _In_ PVOID Item2, _In_opt_ PVOID Context ) { PPHP_OBJECT_SEARCH_RESULT item1 = Item1; PPHP_OBJECT_SEARCH_RESULT item2 = Item2; return uintptrcmp((ULONG_PTR)item1->Handle, (ULONG_PTR)item2->Handle); }
INT NTAPI PhpGdiHandleObjectCompareFunction( _In_ PVOID Item1, _In_ PVOID Item2, _In_opt_ PVOID Context ) { PPH_GDI_HANDLE_ITEM item1 = Item1; PPH_GDI_HANDLE_ITEM item2 = Item2; return uintptrcmp((ULONG_PTR)item1->Object, (ULONG_PTR)item2->Object); }
static INT NTAPI PhpHeapAddressCompareFunction( __in PVOID Item1, __in PVOID Item2, __in_opt PVOID Context ) { PRTL_HEAP_INFORMATION heapInfo1 = Item1; PRTL_HEAP_INFORMATION heapInfo2 = Item2; return uintptrcmp((ULONG_PTR)heapInfo1->BaseAddress, (ULONG_PTR)heapInfo2->BaseAddress); }
static INT NTAPI PhpHeapCommittedCompareFunction( __in PVOID Item1, __in PVOID Item2, __in_opt PVOID Context ) { PRTL_HEAP_INFORMATION heapInfo1 = Item1; PRTL_HEAP_INFORMATION heapInfo2 = Item2; return uintptrcmp(heapInfo1->BytesCommitted, heapInfo2->BytesCommitted); }
static INT NTAPI EtpSizeCompareFunction( __in PVOID Item1, __in PVOID Item2, __in_opt PVOID Context ) { PRTL_UNLOAD_EVENT_TRACE item1 = Item1; PRTL_UNLOAD_EVENT_TRACE item2 = Item2; return uintptrcmp(item1->SizeOfImage, item2->SizeOfImage); }
static INT NTAPI EtpBaseAddressCompareFunction( __in PVOID Item1, __in PVOID Item2, __in_opt PVOID Context ) { PRTL_UNLOAD_EVENT_TRACE item1 = Item1; PRTL_UNLOAD_EVENT_TRACE item2 = Item2; return uintptrcmp((ULONG_PTR)item1->BaseAddress, (ULONG_PTR)item2->BaseAddress); }
INT NTAPI PhpObjectProcessCompareFunction( _In_ PVOID Item1, _In_ PVOID Item2, _In_opt_ PVOID Context ) { PPHP_OBJECT_SEARCH_RESULT item1 = Item1; PPHP_OBJECT_SEARCH_RESULT item2 = Item2; INT result; result = PhCompareStringWithNull(item1->ProcessName, item2->ProcessName, TRUE); if (result != 0) return result; else return uintptrcmp((ULONG_PTR)item1->ProcessId, (ULONG_PTR)item2->ProcessId); }