34 lines
901 B
C++
34 lines
901 B
C++
#include "ob_reg_callback.h"
|
|
#include "anit_screen_grap.h"
|
|
#include "create_thread_callback.h"
|
|
#include "load_Image_callback.h"
|
|
#include "protect_filter.h"
|
|
|
|
EXTERN_C NTSTATUS DriverEntry(PDRIVER_OBJECT drv_obj, PUNICODE_STRING)
|
|
{
|
|
drv_obj->DriverUnload = [](PDRIVER_OBJECT)
|
|
{
|
|
ob_call_back::uninstall_ob_callback();
|
|
thread_notify_routine::unload_thread_routine();
|
|
load_image_notify_routine::remove_image_load_notify_routine();
|
|
};
|
|
|
|
kernel_api::kernel_api_init();
|
|
|
|
protect_filter::Init();
|
|
protect_filter::add_list(7868, 0);
|
|
protect_filter::add_list(8152, 0);
|
|
protect_filter::add_list(8224, 0);
|
|
|
|
protect_filter::is_protect_pid(0);
|
|
|
|
protect_filter::remove_list(7868,0);
|
|
protect_filter::is_protect_pid(0);
|
|
|
|
|
|
ob_call_back::register_ob_reg_callback();
|
|
thread_notify_routine::create_thread_routine();
|
|
load_image_notify_routine::create_image_load_notify_routine();
|
|
|
|
return STATUS_SUCCESS;
|
|
} |