hookdevice.h

一个过滤层文件系统驱动的完整代码,实现了文件的加密,操作截获等

#pragma once

#ifndef HOOK_DEVICE_H
#define HOOK_DEVICE_H

NTSTATUS 
HookDevice( 
    IN ULONG Drive, 
    IN PDRIVER_OBJECT DriverObject 
    );


VOID 
UnhookDevice( 
    IN ULONG Drive 
    );

  
VOID 
UnloadDetach( 
    VOID 
    );


ULONG 
HookDeviceSet( 
    IN ULONG DriveSet, 
    IN PDRIVER_OBJECT DriverObject 
    );

#endif