mirror of https://github.com/tongzx/nt5src
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
50 lines
964 B
50 lines
964 B
|
|
//
|
|
// counter/accumulators
|
|
//
|
|
|
|
typedef struct {
|
|
volatile ULONG CountStart;
|
|
volatile ULONG CountEnd;
|
|
volatile ULONGLONG Counters[MAX_EVENTS];
|
|
volatile ULONGLONG TSC;
|
|
volatile ULONG ThunkCounters[MAX_THUNK_COUNTERS];
|
|
} ACCUMULATORS, *PACCUMULATORS;
|
|
|
|
//
|
|
// Per hook record
|
|
//
|
|
|
|
typedef struct ThunkHookInfo {
|
|
LIST_ENTRY HookList;
|
|
ULONG HookAddress;
|
|
ULONG OriginalDispatch;
|
|
ULONG TracerId;
|
|
|
|
UCHAR HookCode[80];
|
|
|
|
} HOOKEDTHUNK, *PHOOKEDTHUNK;
|
|
|
|
//
|
|
// Define the device extension
|
|
//
|
|
|
|
typedef struct _DEVICE_EXTENSION {
|
|
|
|
ULONG na;
|
|
|
|
} DEVICE_EXTENSION, *PDEVICE_EXTENSION;
|
|
|
|
|
|
//
|
|
// Define for counted events
|
|
//
|
|
|
|
typedef struct _COUNTED_EVENTS {
|
|
ULONG Encoding;
|
|
PUCHAR Token;
|
|
ULONG SuggestedIntervalBase;
|
|
PUCHAR Description;
|
|
PUCHAR OfficialToken;
|
|
PUCHAR OfficialDescription;
|
|
} COUNTED_EVENTS, *PCOUNTED_EVENTS;
|