mirror of
https://github.com/ciyze0101/Windows-Rootkits
synced 2024-06-26 00:38:06 +00:00
17 lines
617 B
C
17 lines
617 B
C
#pragma once
|
|
#include "SSSDTManager.h"
|
|
#include "common.h"
|
|
|
|
PVOID GetKeShadowServiceDescriptorTable32();
|
|
PVOID GetKeShadowServiceDescriptorTable64();
|
|
|
|
PVOID GetSSSDTFunctionAddress64(ULONG ulIndex);
|
|
PVOID GetSSSDTFunctionAddress32(ULONG ulIndex);
|
|
|
|
BOOLEAN GetSysModuleByLdrDataTable(WCHAR* wzModuleName);
|
|
BOOLEAN GetSysModuleByLdrDataTable1(PVOID Address,WCHAR* wzModuleName);
|
|
|
|
VOID UnHookSSSDTWin7(ULONG ulIndex, ULONG_PTR OriginalFunctionAddress);
|
|
VOID UnHookSSSDTWinXP(ULONG ulIndex, ULONG_PTR OriginalFunctionAddress);
|
|
|
|
BOOLEAN ResumeSSSDTInlineHook(ULONG ulIndex,UCHAR* szOriginalFunctionCode); |