#pragma once
#include "..\Anti-Rootkit\AntiRootkit.h"


struct DriverHelper final {
	static bool LoadDriver(bool load = true);
	static bool InstallDriver(bool justCopy = false, void* pBuffer = nullptr,DWORD size = 0);
	static bool UpdateDriver(void* pBuffer,DWORD size);
	static bool IsDriverLoaded();
	static HANDLE OpenHandle(void* pObject, ACCESS_MASK);
	static HANDLE DupHandle(HANDLE hObject, ULONG pid, ACCESS_MASK access, DWORD flags = DUPLICATE_SAME_ACCESS);
	static HANDLE OpenProcess(DWORD pid, ACCESS_MASK access = PROCESS_QUERY_INFORMATION);
	//static PVOID GetObjectAddress(HANDLE hObject);
	static USHORT GetVersion();
	static USHORT GetCurrentVersion();
	static bool CloseDevice();
	static HANDLE OpenThread(DWORD tid, ACCESS_MASK access = THREAD_QUERY_INFORMATION);
	static HANDLE OpenKey(PCWSTR name, ACCESS_MASK access);
	static PULONG GetShadowServiceTable(PULONG* pServiceDescriptor);
	static PVOID GetSSDTApiAddress(ULONG number);
	static PVOID GetShadowSSDTApiAddress(ULONG number);
	static ULONG GetServiceLimit(PULONG* pTable);
	static bool InitNtServiceTable(PULONG* pTable);
	static ULONG GetProcessNotifyCount(ProcessNotifyCountData* pData);
	static ULONG GetThreadNotifyCount(ThreadNotifyCountData* pData);
	static bool EnumProcessNotify(NotifyInfo* pNotifyInfo, KernelCallbackInfo* pCallbackInfo);
	static bool EnumThreadNotify(NotifyInfo* pNotifyInfo, KernelCallbackInfo* pCallbackInfo);
	static bool EnumImageLoadNotify(NotifyInfo* pNotifyInfo, KernelCallbackInfo* pCallbackInfo);
	static ULONG GetImageNotifyCount(PULONG* pCount);
	static bool EnumPiDDBCacheTable(ULONG_PTR Address,PVOID buffer,ULONG size);
	static ULONG GetUnloadedDriverCount(PULONG* pCount);
	static bool EnumUnloadedDrivers(UnloadedDriversInfo* pInfo,PVOID buffer,ULONG size);
	static ULONG GetPiDDBCacheDataSize(ULONG_PTR Address);
	static ULONG GetUnloadedDriverDataSize(UnloadedDriversInfo* pInfo);
	static bool EnumObCallbackNotify(KernelNotifyInfo* pNotifyInfo,ObCallbackInfo* pCallbackInfo,ULONG size);
	static LONG GetObCallbackCount(KernelNotifyInfo* pNotifyInfo);
	static ULONG GetCmCallbackCount(PULONG* pCount);
	static ULONG GetIoTimerCount(PULONG* pCount);
	static bool EnumCmCallbackNotify(PVOID pHeadList, CmCallbackInfo* pCallbackInfo,ULONG size);
	static bool GetDriverObjectRoutines(PCWSTR name, PVOID pRoutines);
	static bool SetImageLoadNotify();
	static bool RemoveImageLoadNotify();
	static bool RemoveNotify(NotifyData* pData);
	static bool EnableDbgSys(DbgSysCoreInfo* pInfo);
	static bool DisableDbgSys();
	static bool EnumKernelTimer(KernelTimerData* pData,DpcTimerInfo* pInfo,SIZE_T size);
	static bool EnumIoTimer(IoTimerData* pData, IoTimerInfo* pInfo, SIZE_T size);
	static bool EnumMiniFilterOperations(MiniFilterData* pData, OperationInfo* pInfo, SIZE_T size);

	static ULONG GetKernelTimerCount(KernelTimerData* pData);
private:
	static bool OpenDevice();

	static HANDLE _hDevice;
};