ssdthook.h

来自「灰狐驱动学习笔记系列 参考 windows驱动开发详解和 楚狂人windows驱」· C头文件 代码 · 共 49 行

H
49
字号
/*

  SSDTHook.h

  Author: Adly
  Last Updated: 2008-11-16

*/

#ifndef _SSDTHOOK_H
#define _SSDTHOOK_H 1

//
// Define the various device type values.  Note that values used by Microsoft
// Corporation are in the range 0-0x7FFF(32767), and 0x8000(32768)-0xFFFF(65535)
// are reserved for use by customers.
//

#define FILE_DEVICE_SSDTHOOK	0x8000

//
// Macro definition for defining IOCTL and FSCTL function control codes. Note
// that function codes 0-0x7FF(2047) are reserved for Microsoft Corporation,
// and 0x800(2048)-0xFFF(4095) are reserved for customers.
//

#define SSDTHOOK_IOCTL_BASE	0x800

//
// The device driver IOCTLs
//

#define CTL_CODE_SSDTHOOK(i) CTL_CODE(FILE_DEVICE_SSDTHOOK, SSDTHOOK_IOCTL_BASE+i, METHOD_BUFFERED, FILE_ANY_ACCESS)

#define IOCTL_SSDTHOOK_TEST0	CTL_CODE_SSDTHOOK(0)
#define IOCTL_SSDTHOOK_TEST1	CTL_CODE_SSDTHOOK(1)


//
// Name that Win32 front end will use to open the SSDTHook device
//

#define SSDTHOOK_WIN32_DEVICE_NAME_A	"\\\\.\\SSDTHook"
#define SSDTHOOK_WIN32_DEVICE_NAME_W	L"\\\\.\\SSDTHook"
#define SSDTHOOK_DEVICE_NAME_W			L"\\Device\\SSDTHook"
#define SSDTHOOK_DOS_DEVICE_NAME_W		L"\\DosDevices\\SSDTHook"


#endif

⌨️ 快捷键说明

复制代码Ctrl + C
搜索代码Ctrl + F
全屏模式F11
增大字号Ctrl + =
减小字号Ctrl + -
显示快捷键?