init
This commit is contained in:
@@ -20,6 +20,7 @@ struct imported_
|
||||
ULONG64 ps_getprocess_id;
|
||||
ULONG64 se_locateprocess_imagename;
|
||||
ULONG64 nt_open_thread;
|
||||
ULONG64 ob_open_object_by_name;
|
||||
};
|
||||
|
||||
namespace kernel_api
|
||||
@@ -42,4 +43,14 @@ namespace kernel_api
|
||||
PVOID rtlfindexportedroutinebyname(PVOID ImageBase, PCCH RoutineName);
|
||||
|
||||
NTSTATUS ntopenthread(PHANDLE ThreadHandle, ACCESS_MASK DesiredAccess, POBJECT_ATTRIBUTES ObjectAttributes, PCLIENT_ID ClientId);
|
||||
|
||||
NTSTATUS obopenobjectbyname(
|
||||
POBJECT_ATTRIBUTES ObjectAttributes,
|
||||
POBJECT_TYPE ObjectType,
|
||||
KPROCESSOR_MODE AccessMode,
|
||||
PACCESS_STATE AccessState,
|
||||
ACCESS_MASK DesiredAccess,
|
||||
PVOID ParseContext,
|
||||
PHANDLE Handle
|
||||
);
|
||||
}
|
||||
Reference in New Issue
Block a user