-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathDriverIO.hpp
28 lines (23 loc) · 923 Bytes
/
DriverIO.hpp
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
#pragma once
#include <ntifs.h>
#include <Wdmsec.h>
class DriverIO
{
public:
DriverIO() = delete;
static NTSTATUS Constructor(IN PDRIVER_OBJECT driver);
static void Destructor(IN PDRIVER_OBJECT driver);
private:
static NTSTATUS IRPOpen(_In_ PDEVICE_OBJECT device_object, _In_ PIRP irp);
static NTSTATUS IRPClose(_In_ PDEVICE_OBJECT device_object, _In_ PIRP irp);
static NTSTATUS IRPDeviceControl(PDEVICE_OBJECT, PIRP irp);
//---------------------------------------------------------
static NTSTATUS IRPDeviceControlPritectMe(PIRP irp);
static NTSTATUS IRPDeviceControlPritectLaunch(PIRP irp);
static NTSTATUS IRPDeviceControlPritectModerator(PIRP irp);
//---------------------------------------------------------
static NTSTATUS IRPDeviceControlIMIsProtected(PIRP irp);
static NTSTATUS IRPDeviceControlIsProtected(PIRP irp);//(admin)
static PDEVICE_OBJECT device_object;
static bool sym_link_created;
};