#include "ob_reg_callback.h" #include "anit_screen_grap.h" #include "create_thread_callback.h" #include "load_Image_callback.h" #include "protect_filter.h" #include "process_func.h" #include "kernel_function.h" EXTERN_C NTSTATUS DriverEntry(PDRIVER_OBJECT drv_obj, PUNICODE_STRING) { if (drv_obj) { drv_obj->DriverUnload = [](PDRIVER_OBJECT) { ob_call_back::uninstall_ob_callback(); thread_notify_routine::unload_thread_routine(); //load_image_notify_routine::remove_image_load_notify_routine(); }; } kernel_api::kernel_api_init(); protect_filter::Init(); protect_filter::add_list(10492, 0); DbgPrintEx(77, 0, "[+]ob_reg_callback status:%x\n", ob_call_back::register_ob_reg_callback()); DbgPrintEx(77, 0, "[+]create_thread_routine status:%x\n", thread_notify_routine::create_thread_routine()); //NtQueryVirtualMemory //load_image_notify_routine::create_image_load_notify_routine(); return STATUS_SUCCESS; }