rootkit sample to allow to hide file , process, register key, port for the backdoor and update disk space-rootkit sample to allow to hide file , process, register key, port for the backdoor and update disk space

利用IRP挂钩技术来隐藏磁盘分区。如果传递的IRP为隐藏磁盘的IRP，则丢弃。代码分为应用层和驱动层。-IRP hooks using technology to hide the disk partition. If you pass the IRP to hide disk IRP, then discarded. Code into the application layer and driver layer.