main.h

实现了隐藏进程,使进程对任务管理器和进程查看器均不可见,使文件对资源管理器不可见 是驱动编程入门的好例子

#if !defined(AFX_MAIN_H__B3C11B05_F3DF_4A08_B0AB_B385CE115875__INCLUDED_)
#define AFX_MAIN_H__B3C11B05_F3DF_4A08_B0AB_B385CE115875__INCLUDED_


#include "..\HideDriver\common.h"
extern "C"
{
	NTSTATUS DriverEntry(IN PDRIVER_OBJECT DriverObject,IN PUNICODE_STRING RegistryPath);
	VOID DriverUnload(IN PDRIVER_OBJECT DriverObject);
	NTSTATUS CompleteIrp( PIRP Irp, NTSTATUS status, ULONG info);
	NTSTATUS DeviceControlRoutine( IN PDEVICE_OBJECT fdo, IN PIRP Irp );
	NTSTATUS Close_HandleIRPprocessing(IN PDEVICE_OBJECT fdo,IN PIRP Irp);
	NTSTATUS Create_File_IRPprocessing(IN PDEVICE_OBJECT fdo,IN PIRP Irp);
}// extern "C"

#endif // !defined(AFX_MAIN_H__B3C11B05_F3DF_4A08_B0AB_B385CE115875__INCLUDED_)