Files
JKornev-hidden/Hidden/PsTable.h
T
2016-07-22 02:02:31 +03:00

19 lines
560 B
C

#pragma once
#include <Ntddk.h>
typedef struct _ProcessTableEntry{
HANDLE processId;
BOOLEAN excluded;
BOOLEAN protected;
} ProcessTableEntry, *PProcessTableEntry;
NTSTATUS InitializeProcessTable(VOID(*InitProcessEntryCallback)(PProcessTableEntry, PCUNICODE_STRING, HANDLE));
VOID DestroyProcessTable();
BOOLEAN AddProcessToProcessTable(PProcessTableEntry entry);
BOOLEAN RemoveProcessFromProcessTable(PProcessTableEntry entry);
BOOLEAN GetProcessInProcessTable(PProcessTableEntry entry);
BOOLEAN UpdateProcessInProcessTable(PProcessTableEntry entry);