diff options
| author | segfault <toni@impl.cc> | 2020-10-01 15:08:06 -0700 |
|---|---|---|
| committer | Toni Uhlig <matzeton@googlemail.com> | 2020-10-02 00:10:56 +0200 |
| commit | f82869a621a40613dd869ef4a2635d4e43b15c2e (patch) | |
| tree | cbdab5733327a19e5b3861906eba90493d2277f5 /KMemDriver/Imports.h | |
| parent | 64c541a06eb667e1519251e3e3279bd485050b47 (diff) | |
Replaced PsSetLoadImageNotifyRoutine with a PatchGuard safe version.
Diffstat (limited to 'KMemDriver/Imports.h')
| -rw-r--r-- | KMemDriver/Imports.h | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/KMemDriver/Imports.h b/KMemDriver/Imports.h index ed70956..8a33dbb 100644 --- a/KMemDriver/Imports.h +++ b/KMemDriver/Imports.h @@ -138,4 +138,19 @@ NTAPI RtlAvlRemoveNode( IN PRTL_AVL_TREE pTree, IN PMMADDRESS_NODE pNode +); + +__kernel_entry +NTSTATUS +ZwQuerySystemInformation( + IN int SystemInformationClass, + OUT PVOID SystemInformation, + IN ULONG SystemInformationLength, + OUT OPTIONAL PULONG ReturnLength +); + +NTKERNELAPI +PVOID +PsGetProcessSectionBaseAddress( + IN PEPROCESS Process );
\ No newline at end of file |