Get the dynamic sizes in a process entry from the driver. @param ProcessId - The target process ID. @param EpochExecutionTime - The time the target process was executed. @return The response. */
| 317 | @return The response. |
| 318 | */ |
| 319 | PROCESS_SIZES_REQUEST |
| 320 | IOCTLCommunication::GetProcessSizes( |
| 321 | _In_ HANDLE ProcessId, |
| 322 | _In_ ULONG EpochExecutionTime |
| 323 | ) |
| 324 | { |
| 325 | PROCESS_SIZES_REQUEST sizeRequest; |
| 326 | |
| 327 | sizeRequest.ProcessId = ProcessId; |
| 328 | sizeRequest.EpochExecutionTime = EpochExecutionTime; |
| 329 | |
| 330 | // |
| 331 | // Query the driver passing in the list request. |
| 332 | // |
| 333 | if (this->GenericQueryDriver(IOCTL_GET_PROCESS_SIZES, &sizeRequest, sizeof(sizeRequest), &sizeRequest, sizeof(sizeRequest)) == FALSE) |
| 334 | { |
| 335 | printf("IOCTLCommunication!GetProcessSizes: Failed to query driver with error code %i.\n", GetLastError()); |
| 336 | } |
| 337 | |
| 338 | return sizeRequest; |
| 339 | } |
| 340 | |
| 341 | /** |
| 342 | Request detailed information on an image. |
no test coverage detected