2023-08-17 10:45:50 +02:00
|
|
|
#ifndef DRIVER_H
|
|
|
|
#define DRIVER_H
|
|
|
|
|
2024-01-15 02:01:14 +01:00
|
|
|
#include "common.h"
|
|
|
|
|
2023-08-17 10:45:50 +02:00
|
|
|
#include <wdf.h>
|
2023-09-25 17:41:38 +02:00
|
|
|
|
|
|
|
#include "queue.h"
|
|
|
|
#include "modules.h"
|
2023-12-31 15:06:24 +01:00
|
|
|
#include "integrity.h"
|
2024-01-13 22:33:57 +01:00
|
|
|
#include "callbacks.h"
|
2024-01-11 10:16:55 +01:00
|
|
|
|
2023-09-27 06:22:14 +02:00
|
|
|
NTSTATUS
|
2023-10-10 15:52:42 +02:00
|
|
|
QueryActiveApcContextsForCompletion();
|
2023-09-27 06:22:14 +02:00
|
|
|
|
2024-01-13 22:33:57 +01:00
|
|
|
LPCSTR
|
|
|
|
GetDriverName();
|
2023-10-06 13:08:30 +02:00
|
|
|
|
2023-12-31 15:06:24 +01:00
|
|
|
PDEVICE_OBJECT
|
|
|
|
GetDriverDeviceObject();
|
|
|
|
|
2024-01-07 05:13:41 +01:00
|
|
|
PDRIVER_OBJECT
|
|
|
|
GetDriverObject();
|
|
|
|
|
2024-01-11 10:16:55 +01:00
|
|
|
PIRP_QUEUE_HEAD
|
|
|
|
GetIrpQueueHead();
|
|
|
|
|
2024-01-13 22:33:57 +01:00
|
|
|
PSYS_MODULE_VAL_CONTEXT
|
|
|
|
GetSystemModuleValidationContext();
|
|
|
|
|
|
|
|
PUNICODE_STRING
|
|
|
|
GetDriverPath();
|
|
|
|
|
|
|
|
PUNICODE_STRING
|
|
|
|
GetDriverRegistryPath();
|
|
|
|
|
|
|
|
PUNICODE_STRING
|
|
|
|
GetDriverDeviceName();
|
|
|
|
|
|
|
|
PUNICODE_STRING
|
|
|
|
GetDriverSymbolicLink();
|
|
|
|
|
|
|
|
PSYSTEM_INFORMATION
|
|
|
|
GetDriverConfigSystemInformation();
|
|
|
|
|
|
|
|
PTHREAD_LIST_HEAD
|
|
|
|
GetThreadList();
|
|
|
|
|
|
|
|
PDRIVER_LIST_HEAD
|
|
|
|
GetDriverList();
|
|
|
|
|
|
|
|
PPROCESS_LIST_HEAD
|
|
|
|
GetProcessList();
|
|
|
|
|
|
|
|
PUINT64
|
|
|
|
GetApcContextArray();
|
|
|
|
|
|
|
|
VOID
|
|
|
|
AcquireDriverConfigLock();
|
|
|
|
|
|
|
|
VOID
|
|
|
|
ReleaseDriverConfigLock();
|
|
|
|
|
|
|
|
BOOLEAN
|
|
|
|
IsDriverUnloading();
|
|
|
|
|
2024-01-31 08:32:13 +01:00
|
|
|
PACTIVE_SESSION
|
|
|
|
GetActiveSession();
|
2024-01-15 02:01:14 +01:00
|
|
|
|
2024-01-25 12:09:16 +01:00
|
|
|
PSHARED_MAPPING
|
|
|
|
GetSharedMappingConfig();
|
|
|
|
|
|
|
|
VOID
|
|
|
|
UnsetNmiInProgressFlag();
|
|
|
|
|
|
|
|
BOOLEAN
|
|
|
|
IsNmiInProgress();
|
|
|
|
|
2024-01-31 08:32:13 +01:00
|
|
|
BOOLEAN
|
|
|
|
HasDriverLoaded();
|
|
|
|
|
2024-02-11 15:34:28 +01:00
|
|
|
BOOLEAN
|
|
|
|
HasWinlogonProcessStarted();
|
|
|
|
|
|
|
|
VOID
|
|
|
|
UpdateWinlogonProcessState(_In_ BOOLEAN NewValue);
|
|
|
|
|
|
|
|
NTSTATUS
|
|
|
|
Allocatex86HashingWorkItem();
|
|
|
|
|
|
|
|
PIO_WORKITEM
|
|
|
|
Getx86HashingWorkItem();
|
|
|
|
|
2023-08-17 10:45:50 +02:00
|
|
|
#endif
|