loaddrv.h

以filemon开源代码为模板

#pragma once

#include <winsvc.h>

#define MAXFILTERLEN	128
#define INFO_BUFFER_SIZE MAX_PATH+4

typedef struct {
	char     includefilter[MAXFILTERLEN];	// 需要显示的过滤条件
	char     excludefilter[MAXFILTERLEN];	// 不需要要显示的过滤条件
	BOOLEAN  logreads;						// 信息可读？
	BOOLEAN  logwrites;						// 信息可写？
}FILTER, *PFILTER;

class CLoadDrv
{
protected:
	LPTSTR m_strDriverName;
	HANDLE m_sysHandle;
	SC_HANDLE m_schSCManager;
	TCHAR* m_sysPath;
protected:
	BOOL InstallDriver();
	BOOL StartDriver();
	BOOL OpenDevice();
	BOOL StopDriver();
	BOOL RemoveDriver( );
	BOOL  StartFilter();

public:
	CLoadDrv(LPCTSTR driveName,LPCTSTR sysPath);
public:
	~CLoadDrv(void);
	BOOL UnloadDeviceDriver();
	BOOL LoadDeviceDriver(PDWORD Error);
};