mydriver.h

PhantOm,Ollydbg隐藏调试的辅助插件代码！

#pragma once

//-------------------------------------------------------------------------------------------------------------
//包含必要头文件:
#include <stdio.h>
#include <string.h>

#include <ntddk.h>
#include <devioctl.h>

//
#include "struct.h"

//-----------------------------------------------------------------------------------------------------------------------
//如果不用NMAKE编译的话,可以在头文件里取掉这个标志:
//#define		__NMAKE_BUILD__

#define HIBYTE(w) ((BYTE)(((WORD)(w) >> 8) & 0xFF))
#define LOBYTE(w) ((BYTE)(w))
#define HIWORD(l) ((WORD)(((DWORD)(l) >> 16) & 0xFFFF))
#define LOWORD(l) ((WORD)(l))



//-----------------------------------------------------------------------------------------------------------------------
//
extern	ULONG	g_dwTickCountLow ;
extern	ULONG	g_dwTickCount    ;


//-----------------------------------------------------------------------------------------------------------------------
//
NTSTATUS _mgMain(IN PDRIVER_OBJECT pDriverObj, IN PUNICODE_STRING RegistryPath);
NTSTATUS DispatchCreate(PDEVICE_OBJECT pDevObj, PIRP pIrp);
NTSTATUS DispatchClose(PDEVICE_OBJECT pDevObj, PIRP pIrp);
VOID DriverUnload(PDRIVER_OBJECT pDriverObj);
NTSTATUS DispatchIoctl(PDEVICE_OBJECT pDevObj, PIRP pIrp);


//
NTSTATUS	mgZwSetInformationThread( ULONG dwType );
NTSTATUS	mgModfiy( PVOID unk1 , ULONG  dwunk, PVOID unkbuf1, PVOID unkbuf2);