?? dpctest.cpp
字號:
#include "DPCTest.h"
#include "..\HideDriver\HookInstall.h"
const int ThreadCount=1;
void DPCTest::Run()
{
mHub = 1;
//for(int i=0;i<ThreadCount;++i)
PsCreateSystemThread(&hThread,THREAD_ALL_ACCESS,NULL,NULL,NULL,&ThreadFunc,this);
DbgPrint("DPCTest running\n");
}
void DPCTest::Stop()
{
//InterlockedDecrement((PLONG)&mHub);
PKTHREAD myThread;
NTSTATUS ret_status= NULL;
ret_status = ObReferenceObjectByHandle(&hThread,THREAD_ALL_ACCESS,NULL,
KernelMode,(PVOID*)(&myThread),NULL);
mHub = 0;
if(ret_status == STATUS_SUCCESS)
{
KeWaitForSingleObject(&myThread,Executive ,KernelMode ,FALSE,NULL);
ObDereferenceObject(myThread);
}
else
DbgPrint("ObReferenceObjectByHandle ERROR\n");
ZwClose(hThread);
}
void ThreadFunc( void* pArguments )
{
DbgPrint("Thread started\n");
DPCTest* pThis = (DPCTest*)pArguments;
long probe=0;
do
{
// EnumFilesInDir();
probe = pThis->mHub;
}
while(probe != 0);
PsTerminateSystemThread( 0 );
}
?? 快捷鍵說明
復制代碼
Ctrl + C
搜索代碼
Ctrl + F
全屏模式
F11
切換主題
Ctrl + Shift + D
顯示快捷鍵
?
增大字號
Ctrl + =
減小字號
Ctrl + -