feat api func
This commit is contained in:
@@ -17,6 +17,8 @@ struct imported_
|
||||
ULONG64 io_getcurrent_process;
|
||||
ULONG64 mm_copy_memory;
|
||||
ULONG64 ps_getprocess_section_baseaddress;
|
||||
ULONG64 ps_getprocess_id;
|
||||
ULONG64 se_locateprocess_imagename;
|
||||
};
|
||||
|
||||
namespace kernel_api
|
||||
@@ -32,4 +34,8 @@ namespace kernel_api
|
||||
|
||||
UCHAR* psgetprocessimagefilname(PEPROCESS Process);
|
||||
|
||||
HANDLE psgetprocessid(PEPROCESS process);
|
||||
|
||||
NTSTATUS selocate_process_imagename(PEPROCESS Process, PUNICODE_STRING* pImageFileName);
|
||||
|
||||
}
|
||||
Reference in New Issue
Block a user