#include "ob_reg_callback.h" #include "anit_screen_grap.h" #include "create_thread_callback.h" #include "load_Image_callback.h" #include "protect_filter.h" #include "process_func.h" EXTERN_C NTSTATUS DriverEntry(PDRIVER_OBJECT drv_obj, PUNICODE_STRING) { drv_obj->DriverUnload = [](PDRIVER_OBJECT) { ob_call_back::uninstall_ob_callback(); thread_notify_routine::unload_thread_routine(); load_image_notify_routine::remove_image_load_notify_routine(); //process_function::eprocess_protect_process_off(4732); }; kernel_api::kernel_api_init(); protect_filter::Init(); //protect_filter::add_list(6644, 0); //process_function::eprocess_protect_process_on(4732); ob_call_back::register_ob_reg_callback(); thread_notify_routine::create_thread_routine(); load_image_notify_routine::create_image_load_notify_routine(); return STATUS_SUCCESS; }