javelin_driver.h

// javelin_driver.h
#pragma once

#include <ntddk.h>

#define JAVELIN_DEVICE 0x8000
#define IOCTL_JAVELIN_PROTECT_PROCESS CTL_CODE(JAVELIN_DEVICE, 0x800, METHOD_BUFFERED, FILE_ANY_ACCESS)
#define IOCTL_JAVELIN_VERIFY_INTEGRITY CTL_CODE(JAVELIN_DEVICE, 0x801, METHOD_BUFFERED, FILE_ANY_ACCESS)

// Struktur untuk komunikasi user-mode ke kernel
typedef struct _JAVELIN_PROTECTION_REQUEST {
    ULONG ProcessId;
    ULONG ProtectionFlags;
} JAVELIN_PROTECTION_REQUEST, *PJAVELIN_PROTECTION_REQUEST;

// Fungsi driver
DRIVER_INITIALIZE DriverEntry;
NTSTATUS JavelinCreateClose(_In_ PDEVICE_OBJECT DeviceObject, _In_ PIRP Irp);
NTSTATUS JavelinDeviceControl(_In_ PDEVICE_OBJECT DeviceObject, _In_ PIRP Irp);

// Callback protection
OB_PREOP_CALLBACK_STATUS OnProcessHandleOperation(
    _In_ PVOID RegistrationContext,
    _In_ POB_PRE_OPERATION_INFORMATION OperationInformation
);

VOID JavelinUnload(_In_ PDRIVER_OBJECT DriverObject);