mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-24 20:35:25 +00:00
27 lines
661 B
C
27 lines
661 B
C
|
struct PROCESS_BASIC_INFORMATION {
|
||
|
|
PVOID Reserved1;
|
||
|
|
DWORD PebBaseAddress;
|
||
|
|
PVOID Reserved2[2];
|
||
|
|
DWORD UniqueProcessId;
|
||
|
|
PVOID Reserved3;
|
||
|
|
};
|
||
|
|
|
||
|
|
typedef NTSTATUS (WINAPI* _NtUnmapViewOfSection)(
|
||
|
|
HANDLE ProcessHandle,
|
||
|
|
PVOID BaseAddress
|
||
|
|
);
|
||
|
|
|
||
|
|
typedef NTSTATUS (WINAPI* _NtQueryInformationProcess)(
|
||
|
|
HANDLE ProcessHandle,
|
||
|
|
DWORD ProcessInformationClass,
|
||
|
|
PVOID ProcessInformation,
|
||
|
|
DWORD ProcessInformationLength,
|
||
|
|
PDWORD ReturnLength
|
||
|
|
);
|
||
|
|
|
||
|
|
typedef NTSTATUS (WINAPI* _NtQuerySystemInformation)(
|
||
|
|
DWORD SystemInformationClass,
|
||
|
|
PVOID SystemInformation,
|
||
|
|
ULONG SystemInformationLength,
|
||
|
|
PULONG ReturnLength
|
||
|
|
);
|