syshide.h

通过hook实现文件

/*

  syshide.H

  Author: 
  Last Updated: 

  This framework is generated by Driver AppWizard

*/

//
// A structure representing the instance information associated with
// a particular device
//

typedef struct _DEVICE_EXTENSION
{
    ULONG  StateVariable;

} DEVICE_EXTENSION, *PDEVICE_EXTENSION;



//
// Define the various device type values.  Note that values used by Microsoft
// Corporation are in the range 0-32767, and 32768-65535 are reserved for use
// by customers.
//

#define FILE_DEVICE_syshide  0x00008300



//
// Macro definition for defining IOCTL and FSCTL function control codes.  Note
// that function codes 0-2047 are reserved for Microsoft Corporation, and
// 2048-4095 are reserved for customers.
//

#define syshide_IOCTL_INDEX  0x830



//
// The MONO device driver IOCTLs
//

#define IOCTL_syshide_HELLO			CTL_CODE(FILE_DEVICE_syshide,  \
												syshide_IOCTL_INDEX,  \
												METHOD_BUFFERED,       \
												FILE_ANY_ACCESS)