32 lines
939 B
C++
32 lines
939 B
C++
#include "ob_reg_callback.h"
|
|
#include "anit_screen_grap.h"
|
|
#include "create_thread_callback.h"
|
|
#include "load_Image_callback.h"
|
|
#include "protect_filter.h"
|
|
#include "process_func.h"
|
|
#include "kernel_function.h"
|
|
EXTERN_C NTSTATUS DriverEntry(PDRIVER_OBJECT drv_obj, PUNICODE_STRING)
|
|
{
|
|
if (drv_obj)
|
|
{
|
|
drv_obj->DriverUnload = [](PDRIVER_OBJECT)
|
|
{
|
|
ob_call_back::uninstall_ob_callback();
|
|
thread_notify_routine::unload_thread_routine();
|
|
//load_image_notify_routine::remove_image_load_notify_routine();
|
|
};
|
|
}
|
|
|
|
|
|
kernel_api::kernel_api_init();
|
|
protect_filter::Init();
|
|
|
|
protect_filter::add_list(10492, 0);
|
|
DbgPrintEx(77, 0, "[+]ob_reg_callback status:%x\n", ob_call_back::register_ob_reg_callback());
|
|
DbgPrintEx(77, 0, "[+]create_thread_routine status:%x\n", thread_notify_routine::create_thread_routine());
|
|
|
|
//NtQueryVirtualMemory
|
|
//load_image_notify_routine::create_image_load_notify_routine();
|
|
|
|
return STATUS_SUCCESS;
|
|
} |