diff options
author | segfault <toni@impl.cc> | 2020-10-01 15:08:06 -0700 |
---|---|---|
committer | segfault <toni@impl.cc> | 2020-10-01 15:08:06 -0700 |
commit | be751c6dc97bac1334968047408bcf3184c2a0eb (patch) | |
tree | 1ba02bafff26d5055637fbdacd8968f7d7f13844 /KMemDriver/Native.h | |
parent | 6013bceda2e5ab8d8549e3374b49d8289f94070e (diff) |
Replaced PsSetLoadImageNotifyRoutine with a PatchGuard safe version.
Diffstat (limited to 'KMemDriver/Native.h')
-rw-r--r-- | KMemDriver/Native.h | 27 |
1 files changed, 27 insertions, 0 deletions
diff --git a/KMemDriver/Native.h b/KMemDriver/Native.h index 6d7d684..6344eed 100644 --- a/KMemDriver/Native.h +++ b/KMemDriver/Native.h @@ -376,5 +376,32 @@ typedef struct _HANDLE_TABLE PVOID DebugInfo; } PHANDLE_TABLE; +typedef struct _SYSTEM_PROCESS_INFORMATION { + ULONG NextEntryOffset; + ULONG NumberOfThreads; + UINT8 Reserved1[48]; + UNICODE_STRING ImageName; + KPRIORITY BasePriority; + ULONG Reserved2; + HANDLE UniqueProcessId; + PVOID Reserved3; + ULONG HandleCount; + ULONG SessionId; + PVOID Reserved4; + SIZE_T PeakVirtualSize; + SIZE_T VirtualSize; + ULONG Reserved5; + SIZE_T PeakWorkingSetSize; + SIZE_T WorkingSetSize; + PVOID Reserved6; + SIZE_T QuotaPagedPoolUsage; + PVOID Reserved7; + SIZE_T QuotaNonPagedPoolUsage; + SIZE_T PagefileUsage; + SIZE_T PeakPagefileUsage; + SIZE_T PrivatePageCount; + LARGE_INTEGER Reserved8[6]; +} SYSTEM_PROCESS_INFORMATION; + #pragma pack(pop) #pragma warning(default : 4214 4201)
\ No newline at end of file |