Custom C/C++ File Explorer
GUI is built using MFC classes
Files management uses ntdll/syscalls functions directly
Application works exclusively with its own disk (VHDx) which has to be mounted previously
Allows drag and drop from any filesystem
For now, only allowed file operation is deletion and viewing filesystem information (FAT32)
Files and folder icon images are stored in custom file called $shell. File is stored in the root partition and loaded at runtime using AVL tree algorithm for management.
Attach kernel-mode driver (filter) to application volume and perform all encryption operations on the fly from driver
Display file virtual & physical memory
Understanding Windows filesystem kernel technologies (especially cache manager)
