一个驱动级反游戏外挂

希望有能力的人给予完善

#include “fake.h“



ZWTerminateProcessPtr ZwTerminateProcessPtr = NULL;
ZWOpenProcessPtr ZwOpenProcessPtr = NULL;
ZWOpenThreadPtr ZwOpenThreadPtr = NULL;
ZWDuplicateobjectPtr ZwDuplicateobjectPtr = NULL;
ZWProtectVirtualMemoryPtr ZwProtectVirtualMemoryPtr = NULL;
ZWWriteVirtualMemoryPtr ZwWriteVirtualMemoryPtr = NULL;


extern ULONG		ZwOpenProcessIndex ;
extern ULONG		ZwTerminateProcessIndex ;
extern ULONG		ZwDuplicateobjectIndex ;
extern ULONG		ZwOpenThreadIndex ;
extern ULONG		ZwProtectVirtualMemoryIndex ;
extern ULONG		ZwWriteVirtualMemoryIndex ;

extern PPROTECTED_PROCESS	pActiveProtectedProcHead ;
extern PVOID KernelImagebase;
extern ULONG KernelImageSize;
extern PULONG	CR0_VALUE;
extern ULONG	ProcessNameOffset;
extern PSERVICE_DEscriptOR_TABLE KeServiceDescri

 属性            大小     日期    时间   名称
----------- ---------  ---------- -----  ----

     文件     379904  2015-12-13 22:03  GameGuard\GameGuard\bin\i386\XGameGuardC.pdb

     文件      90624  2015-12-13 22:03  GameGuard\GameGuard\bin\i386\XGameGuardC.sys

     文件       2964  2015-12-13 22:03  GameGuard\GameGuard\buildchk_win7_x86.log

     文件       2918  2015-12-10 23:08  GameGuard\GameGuard\buildchk_wxp_x86.log

     文件        338  2015-12-12 16:45  GameGuard\GameGuard\buildfre_win7_x86.err

     文件       3860  2015-12-12 16:45  GameGuard\GameGuard\buildfre_win7_x86.log

     文件        198  2015-12-12 16:45  GameGuard\GameGuard\buildfre_win7_x86.wrn

     文件       5742  2015-12-13 22:03  GameGuard\GameGuard\BuildLog.htm

     文件      13152  2015-12-12 17:27  GameGuard\GameGuard\crc32.h

     文件         20  2015-12-10 21:59  GameGuard\GameGuard\ddkbldenv.cmd

     文件        222  2015-12-10 21:59  GameGuard\GameGuard\ddkpostbld.cmd

     文件         70  2015-12-10 21:59  GameGuard\GameGuard\ddkprebld.cmd

     文件      16247  2015-12-14 17:34  GameGuard\GameGuard\fake.c

     文件       3305  2011-02-12 20:20  GameGuard\GameGuard\fake.h

     文件        289  2015-12-10 21:59  GameGuard\GameGuard\GameGuard.vsprops

     文件      18413  2015-12-13 01:31  GameGuard\GameGuard\GameGuard.W7.vcproj

     文件       7664  2015-12-11 23:47  GameGuard\GameGuard\GameGuard.W7.vcproj.2ZG9IJHKGK7KJDZ.Administrator.user

     文件      15105  2015-12-15 17:29  GameGuard\GameGuard\GameGuard.W7.vcproj.TV0PQSCZDC75HQY.Administrator.user

     文件      26818  2015-12-14 17:29  GameGuard\GameGuard\inline.c

     文件       1561  2011-02-15 17:12  GameGuard\GameGuard\inline.h

     文件      29468  2011-02-12 11:44  GameGuard\GameGuard\kaes.h

     文件      25238  2011-02-14 21:53  GameGuard\GameGuard\LDasm.h

     文件      28759  2012-10-21 08:24  GameGuard\GameGuard\libdasm.c

     文件      14714  2008-11-15 08:58  GameGuard\GameGuard\libdasm.h

     文件        267  1996-08-09 03:30  GameGuard\GameGuard\makefile

     文件      95350  2015-12-13 22:03  GameGuard\GameGuard\objchk_win7_x86\i386\fake.obj

     文件     104231  2015-12-13 22:03  GameGuard\GameGuard\objchk_win7_x86\i386\inline.obj

     文件     375577  2015-12-13 22:03  GameGuard\GameGuard\objchk_win7_x86\i386\selfprotec.obj

     文件        364  2015-12-13 22:03  GameGuard\GameGuard\objchk_win7_x86\i386\_objects.mac

     文件     102642  2015-12-10 23:08  GameGuard\GameGuard\objchk_wxp_x86\i386\fake.obj

............此处省略37个文件信息