该文档介绍了用NT驱动程序来拦截NTAPI来实现彻底隐藏文件和目录的目的。NT下有一个文件NTDLL.DLL，大部分NTAPI都是在这个库中封装的。其中实现查找文件和目录的API接口是ZwQueryDirectoryFile，所以我们只要拦截这个API的话，文件和目录就可以完全隐藏了！-This document describes the use of NT driver to intercept NTAPI to achieve completely hidden files and directories purposes. Under the NT has a file NTDLL.DLL, most NTAPI are in this library package. Find files and directories which achieved an API interface is ZwQueryDirectoryFile, so long as we intercept this API, then the files and directories can be completely hidden!