mirror-ac/driver/pool.h
2023-11-09 18:30:59 +11:00

30 lines
No EOL
500 B
C

#ifndef POOL_H
#define POOL_H
#include <ntifs.h>
#include "common.h"
#define REPORT_INVALID_PROCESS_BUFFER_SIZE 4096
typedef struct _INVALID_PROCESS_ALLOCATION_REPORT
{
INT report_code;
CHAR process[REPORT_INVALID_PROCESS_BUFFER_SIZE];
}INVALID_PROCESS_ALLOCATION_REPORT, * PINVALID_PROCESS_ALLOCATION_REPORT;
NTSTATUS
FindUnlinkedProcesses();
VOID
GetPsActiveProcessHead(
_Out_ PUINT64 Address
);
PKDDEBUGGER_DATA64
GetGlobalDebuggerData();
NTSTATUS
EnumerateBigPoolAllocations();
#endif