2023-08-26 14:07:06 +02:00
|
|
|
#ifndef POOL_H
|
|
|
|
|
#define POOL_H
|
|
|
|
|
|
|
|
|
|
#include <ntifs.h>
|
2023-09-02 15:47:15 +02:00
|
|
|
#include "common.h"
|
2023-08-26 14:07:06 +02:00
|
|
|
|
2023-09-23 13:40:39 +02:00
|
|
|
#define REPORT_INVALID_PROCESS_BUFFER_SIZE 4096
|
2023-08-28 17:00:52 +02:00
|
|
|
|
|
|
|
|
typedef struct _INVALID_PROCESS_ALLOCATION_REPORT
|
|
|
|
|
{
|
|
|
|
|
INT report_code;
|
2023-10-05 08:27:17 +02:00
|
|
|
CHAR process[REPORT_INVALID_PROCESS_BUFFER_SIZE];
|
2023-08-28 17:00:52 +02:00
|
|
|
|
2023-10-05 08:27:17 +02:00
|
|
|
}INVALID_PROCESS_ALLOCATION_REPORT, * PINVALID_PROCESS_ALLOCATION_REPORT;
|
2023-08-28 17:00:52 +02:00
|
|
|
|
2023-10-05 08:27:17 +02:00
|
|
|
NTSTATUS
|
2023-11-09 08:30:59 +01:00
|
|
|
FindUnlinkedProcesses();
|
2023-08-28 11:17:38 +02:00
|
|
|
|
2023-10-05 08:27:17 +02:00
|
|
|
VOID
|
2023-09-27 06:22:14 +02:00
|
|
|
GetPsActiveProcessHead(
|
2023-10-07 17:37:47 +02:00
|
|
|
_Out_ PUINT64 Address
|
2023-08-30 11:19:41 +02:00
|
|
|
);
|
|
|
|
|
|
2023-10-05 08:27:17 +02:00
|
|
|
PKDDEBUGGER_DATA64
|
2023-09-27 06:22:14 +02:00
|
|
|
GetGlobalDebuggerData();
|
2023-08-29 19:36:58 +02:00
|
|
|
|
2023-11-08 16:02:17 +01:00
|
|
|
NTSTATUS
|
|
|
|
|
EnumerateBigPoolAllocations();
|
2023-10-07 07:27:22 +02:00
|
|
|
|
2023-08-26 14:07:06 +02:00
|
|
|
#endif
|
