mirror of
https://github.com/BeneficialCode/WinArk.git
synced 2026-10-18 13:41:03 +08:00
BeneficialCode
26 lines
741 B
C
26 lines
741 B
C
#pragma once
|
|
|
|
#include "typesdefs.h"
|
|
|
|
NTSTATUS NTAPI HookNtQuerySystemInformation(
|
|
_In_ SYSTEM_INFORMATION_CLASS SystemInformationClass,
|
|
_Out_ PVOID SystemInformation,
|
|
_In_ ULONG SystemInformationLength,
|
|
_Out_opt_ PULONG ReturnLength
|
|
);
|
|
|
|
extern "C"
|
|
NTSTATUS NTAPI NtQuerySystemInformation(
|
|
_In_ SYSTEM_INFORMATION_CLASS SystemInformationClass,
|
|
_Out_ PVOID SystemInformation,
|
|
_In_ ULONG SystemInformationLength,
|
|
_Out_opt_ PULONG ReturnLength
|
|
);
|
|
|
|
struct BypassAntiKernelDbg {
|
|
static PVOID GetExportSymbolAddress(PCWSTR symbolName);
|
|
static NTSTATUS Bypass();
|
|
static NTSTATUS Unbypass();
|
|
using PNtQuerySystemInformation = decltype(&NtQuerySystemInformation);
|
|
static inline PNtQuerySystemInformation g_pNtQuerySystemInformation{};
|
|
}; |