The file Ghost.h has been expanded to define more data types and a data structure used when calling CreateFile. Functions such as CreateFileW and lstrcmpiW have been located in kernel32.dll and supplied to injected functions through the data transfer structure, IN_PROCESS_DATA, defined in injectManager.h:
// Copyright Ric Vieler, 2006 // Support header for Ghost.c #ifndef _GHOST_H_ #define _GHOST_H_ typedef unsigned long DWORD; typedef int BOOL; typedef unsigned char BYTE; typedef unsigned short WORD; typedef float FLOAT; typedef FLOAT* PFLOAT; typedef BOOL* PBOOL; typedef BYTE* PBYTE; typedef int* PINT; typedef WORD* PWORD; typedef DWORD* PDWORD; typedef DWORD* LPDWORD; typedef int INT; typedef unsigned int UINT; typedef unsigned int* PUINT; typedef long* LPLONG; typedef void* PVOID; #define LPVOID PVOID typedef PVOID FARPROC; typedef const void* LPCVOID; typedef struct _SECURITY_ATTRIBUTES { DWORD nLength; LPVOID lpSecurityDescriptor; BOOL bInheritHandle; } SECURITY_ATTRIBUTES, *PSECURITY_ATTRIBUTES, *LPSECURITY_ATTRIBUTES; #endif