mirror of
https://github.com/donnaskiez/ac.git
synced 2024-11-21 22:24:08 +01:00
33 lines
No EOL
558 B
C
33 lines
No EOL
558 B
C
#ifndef THREAD_H
|
|
#define THREAD_H
|
|
|
|
#include <ntifs.h>
|
|
|
|
#include "common.h"
|
|
|
|
typedef struct _HIDDEN_SYSTEM_THREAD_REPORT
|
|
{
|
|
INT report_code;
|
|
INT found_in_kthreadlist;
|
|
INT found_in_pspcidtable;
|
|
UINT64 thread_address;
|
|
LONG thread_id;
|
|
CHAR thread[4096];
|
|
|
|
}HIDDEN_SYSTEM_THREAD_REPORT, * PHIDDEN_SYSTEM_THREAD_REPORT;
|
|
|
|
typedef struct _ATTACH_PROCESS_REPORT
|
|
{
|
|
INT report_code;
|
|
UINT32 thread_id;
|
|
UINT64 thread_address;
|
|
|
|
}ATTACH_PROCESS_REPORT, * PATTACH_PROCESS_REPORT;
|
|
|
|
VOID
|
|
ValidateKPCRBThreads();
|
|
|
|
VOID
|
|
DetectThreadsAttachedToProtectedProcess();
|
|
|
|
#endif |