diff --git a/Anti-Cheat_Driver/Anti-Cheat_Driver.vcxproj b/Anti-Cheat_Driver/Anti-Cheat_Driver.vcxproj index a22c6a3..00535b2 100644 --- a/Anti-Cheat_Driver/Anti-Cheat_Driver.vcxproj +++ b/Anti-Cheat_Driver/Anti-Cheat_Driver.vcxproj @@ -71,6 +71,7 @@ WindowsKernelModeDriver10.0 Driver WDM + Spectre Windows10 @@ -136,6 +137,9 @@ /INTEGRITYCHECK %(AdditionalOptions) + + false + diff --git a/Anti-Cheat_Driver/driver_main.cpp b/Anti-Cheat_Driver/driver_main.cpp index 57155ee..87dee58 100644 --- a/Anti-Cheat_Driver/driver_main.cpp +++ b/Anti-Cheat_Driver/driver_main.cpp @@ -4,32 +4,29 @@ #include "load_Image_callback.h" #include "protect_filter.h" #include "process_func.h" - +#include "kernel_function.h" EXTERN_C NTSTATUS DriverEntry(PDRIVER_OBJECT drv_obj, PUNICODE_STRING) { - drv_obj->DriverUnload = [](PDRIVER_OBJECT) + if (drv_obj) { - ob_call_back::uninstall_ob_callback(); - thread_notify_routine::unload_thread_routine(); - load_image_notify_routine::remove_image_load_notify_routine(); + drv_obj->DriverUnload = [](PDRIVER_OBJECT) + { + ob_call_back::uninstall_ob_callback(); + thread_notify_routine::unload_thread_routine(); + //load_image_notify_routine::remove_image_load_notify_routine(); + }; + } - //process_function::eprocess_protect_process_off(4732); - }; - kernel_api::kernel_api_init(); - protect_filter::Init(); - //protect_filter::add_list(6644, 0); - - - //process_function::eprocess_protect_process_on(4732); - - - ob_call_back::register_ob_reg_callback(); - thread_notify_routine::create_thread_routine(); - load_image_notify_routine::create_image_load_notify_routine(); + protect_filter::add_list(10492, 0); + DbgPrintEx(77, 0, "[+]ob_reg_callback status:%x\n", ob_call_back::register_ob_reg_callback()); + DbgPrintEx(77, 0, "[+]create_thread_routine status:%x\n", thread_notify_routine::create_thread_routine()); + + //NtQueryVirtualMemory + //load_image_notify_routine::create_image_load_notify_routine(); return STATUS_SUCCESS; } \ No newline at end of file