mirror-ac/driver/pool.h

#ifndef POOL_H
#define POOL_H

#include <ntifs.h>
#include "common.h"

#define REPORT_INVALID_PROCESS_BUFFER_SIZE 4096

typedef struct _INVALID_PROCESS_ALLOCATION_REPORT
{
	INT report_code;
	CHAR process[REPORT_INVALID_PROCESS_BUFFER_SIZE];

}INVALID_PROCESS_ALLOCATION_REPORT, * PINVALID_PROCESS_ALLOCATION_REPORT;

NTSTATUS
FindUnlinkedProcesses(
	_Inout_ PIRP Irp
);

VOID
GetPsActiveProcessHead(
	_Out_ PUINT64 Address
);

PKDDEBUGGER_DATA64
GetGlobalDebuggerData();



#endif