#include "ob_reg_callback.h" #include "anit_screen_grap.h" #include "create_thread_callback.h" #include "load_Image_callback.h" #include "protect_filter.h" EXTERN_C NTSTATUS DriverEntry(PDRIVER_OBJECT drv_obj, PUNICODE_STRING) { drv_obj->DriverUnload = [](PDRIVER_OBJECT) { ob_call_back::uninstall_ob_callback(); thread_notify_routine::unload_thread_routine(); load_image_notify_routine::remove_image_load_notify_routine(); }; kernel_api::kernel_api_init(); protect_filter::Init(); protect_filter::add_list(4504, 0); protect_filter::add_list(8152, 0); protect_filter::add_list(8224, 0); //protect_filter::is_protect_pid(0); //protect_filter::remove_list(7868,0); //protect_filter::is_protect_pid(0); ob_call_back::register_ob_reg_callback(); thread_notify_routine::create_thread_routine(); load_image_notify_routine::create_image_load_notify_routine(); return STATUS_SUCCESS; }