style

Anti-Cheat_Driver/Anti-Cheat_Driver.vcxproj

@@ -71,6 +71,7 @@
     <PlatformToolset>WindowsKernelModeDriver10.0</PlatformToolset>
     <ConfigurationType>Driver</ConfigurationType>
     <DriverType>WDM</DriverType>
+    <Driver_SpectreMitigation>Spectre</Driver_SpectreMitigation>
   </PropertyGroup>
   <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Debug|ARM'" Label="Configuration">
     <TargetVersion>Windows10</TargetVersion>
@@ -136,6 +137,9 @@
     <Link>
       <AdditionalOptions>/INTEGRITYCHECK %(AdditionalOptions)</AdditionalOptions>
     </Link>
+    <ClCompile>
+      <BufferSecurityCheck>false</BufferSecurityCheck>
+    </ClCompile>
   </ItemDefinitionGroup>
   <ItemGroup>
     <FilesToPackage Include="$(TargetPath)" />

Anti-Cheat_Driver/driver_main.cpp

@@ -4,32 +4,29 @@
 #include "load_Image_callback.h"
 #include "protect_filter.h"
 #include "process_func.h"
-
+#include "kernel_function.h"
 EXTERN_C NTSTATUS DriverEntry(PDRIVER_OBJECT drv_obj, PUNICODE_STRING)
 {
-	drv_obj->DriverUnload = [](PDRIVER_OBJECT)
+	if (drv_obj)
 	{
-		ob_call_back::uninstall_ob_callback();
-		thread_notify_routine::unload_thread_routine();
-		load_image_notify_routine::remove_image_load_notify_routine();
+		drv_obj->DriverUnload = [](PDRIVER_OBJECT)
+		{
+			ob_call_back::uninstall_ob_callback();
+			thread_notify_routine::unload_thread_routine();
+			//load_image_notify_routine::remove_image_load_notify_routine();
+		};
+	}
 
 
-		//process_function::eprocess_protect_process_off(4732);
-	};
-
 	kernel_api::kernel_api_init();
-
 	protect_filter::Init();
 
-	//protect_filter::add_list(6644, 0);
-
-
-	//process_function::eprocess_protect_process_on(4732);
-
-
-	ob_call_back::register_ob_reg_callback();
-	thread_notify_routine::create_thread_routine();
-	load_image_notify_routine::create_image_load_notify_routine();
+	protect_filter::add_list(10492, 0);
+	DbgPrintEx(77, 0, "[+]ob_reg_callback status:%x\n", ob_call_back::register_ob_reg_callback());
+	DbgPrintEx(77, 0, "[+]create_thread_routine status:%x\n", thread_notify_routine::create_thread_routine());
+	
+	//NtQueryVirtualMemory
+	//load_image_notify_routine::create_image_load_notify_routine();
 	
 	return STATUS_SUCCESS;
 }