INT NTAPI PhpObjectHandleCompareFunction(
_In_ PVOID Item1,
_In_ PVOID Item2,
_In_opt_ PVOID Context
)
{
PPHP_OBJECT_SEARCH_RESULT item1 = Item1;
PPHP_OBJECT_SEARCH_RESULT item2 = Item2;
return uintptrcmp((ULONG_PTR)item1->Handle, (ULONG_PTR)item2->Handle);
}
INT NTAPI PhpGdiHandleObjectCompareFunction(
_In_ PVOID Item1,
_In_ PVOID Item2,
_In_opt_ PVOID Context
)
{
PPH_GDI_HANDLE_ITEM item1 = Item1;
PPH_GDI_HANDLE_ITEM item2 = Item2;
return uintptrcmp((ULONG_PTR)item1->Object, (ULONG_PTR)item2->Object);
}
static INT NTAPI PhpHeapAddressCompareFunction(
__in PVOID Item1,
__in PVOID Item2,
__in_opt PVOID Context
)
{
PRTL_HEAP_INFORMATION heapInfo1 = Item1;
PRTL_HEAP_INFORMATION heapInfo2 = Item2;
return uintptrcmp((ULONG_PTR)heapInfo1->BaseAddress, (ULONG_PTR)heapInfo2->BaseAddress);
}
static INT NTAPI PhpHeapCommittedCompareFunction(
__in PVOID Item1,
__in PVOID Item2,
__in_opt PVOID Context
)
{
PRTL_HEAP_INFORMATION heapInfo1 = Item1;
PRTL_HEAP_INFORMATION heapInfo2 = Item2;
return uintptrcmp(heapInfo1->BytesCommitted, heapInfo2->BytesCommitted);
}
static INT NTAPI EtpSizeCompareFunction(
__in PVOID Item1,
__in PVOID Item2,
__in_opt PVOID Context
)
{
PRTL_UNLOAD_EVENT_TRACE item1 = Item1;
PRTL_UNLOAD_EVENT_TRACE item2 = Item2;
return uintptrcmp(item1->SizeOfImage, item2->SizeOfImage);
}
static INT NTAPI EtpBaseAddressCompareFunction(
__in PVOID Item1,
__in PVOID Item2,
__in_opt PVOID Context
)
{
PRTL_UNLOAD_EVENT_TRACE item1 = Item1;
PRTL_UNLOAD_EVENT_TRACE item2 = Item2;
return uintptrcmp((ULONG_PTR)item1->BaseAddress, (ULONG_PTR)item2->BaseAddress);
}
INT NTAPI PhpObjectProcessCompareFunction(
_In_ PVOID Item1,
_In_ PVOID Item2,
_In_opt_ PVOID Context
)
{
PPHP_OBJECT_SEARCH_RESULT item1 = Item1;
PPHP_OBJECT_SEARCH_RESULT item2 = Item2;
INT result;
result = PhCompareStringWithNull(item1->ProcessName, item2->ProcessName, TRUE);
if (result != 0)
return result;
else
return uintptrcmp((ULONG_PTR)item1->ProcessId, (ULONG_PTR)item2->ProcessId);
}
