创建线程函数：PsCreateSystemThread

  1. #include <ntddk.h>
  2. #include <ntstrsafe.h>
  3. #include <time.h>
  5. KSPIN_LOCK lock;
  6. ULONG test = 99;
  8. VOID UnloadDriver(PDRIVER_OBJECT pDriver)
  9. {
  10.     DbgPrint("卸载成功\n");
  11. }
  13. //线程函数
  14. VOID MyThread()
  15. {
  16.     for (ULONG i = 0; i < 999;i++)
  17.     {
  18.         DbgPrint("I am thread,num is %d\n", test);
  19.     }
  20. }
  22. VOID MyThread1()
  23. {
  24.     for (ULONG i = 0; i < 999; i++)
  25.     {
  26.         DbgPrint("111111,num is %d\n", test);
  27.     }
  28. }
  30. NTSTATUS DriverEntry(PDRIVER_OBJECT pDriver, PUNICODE_STRING pRegPath)
  31. {
  32.     NTSTATUS status = NULL;
  33.     HANDLE hThread = NULL;
  34.     HANDLE hThreed1 = NULL;
  35.     KIRQL kIrql;
  36.     //初始化自旋锁
  37.     KeInitializeSpinLock(&lock);
  38.     //开启自旋锁
  39.     KeAcquireSpinLock(&lock, &kIrql);
  40.     //创建线程
  41.     status = PsCreateSystemThread(&hThread, 0, NULL, NULL, NULL, MyThread, NULL);
  42.     //释放锁
  43.     KeReleaseSpinLock(&lock, kIrql);
  44.     status = PsCreateSystemThread(&hThreed1, 0, NULL, NULL, NULL, MyThread1, NULL);
  45.     //关闭线程
  46.     ZwClose(hThread);
  47.     ZwClose(hThreed1);
  48.     DbgPrint("驱动加载成功\n");
  49.     pDriver->DriverUnload = UnloadDriver;
  50. }

内核线程睡眠函数KeDelayExcutionThread

将当前线程暂停指定时间，可以理解为暂停程序一定的时间

  1. #include <ntddk.h>
  2. #include <ntstrsafe.h>
  3. #include <time.h>
  5. KSPIN_LOCK lock;
  6. ULONG testnum;
  8. VOID Thread1()
  9. {
  10.     for (ULONG i = 0; i < 66;i++)
  11.     {
  12.         DbgPrint("线程11111,testnum的值是:%d\n", testnum);
  13.     }
  14. }
  16. VOID Thread2()
  17. {
  18.     for (ULONG i = 0; i < 66; i++)
  19.     {
  20.         DbgPrint("线程22222,testnum的值是:%d\n", testnum);
  21.     }
  22. }
  24. VOID UnloadDriver(PDRIVER_OBJECT pDriver)
  25. {
  26.     DbgPrint("卸载成功\n");
  27. }
  31. NTSTATUS DriverEntry(PDRIVER_OBJECT pDriver, PUNICODE_STRING pRegPath)
  32. {
  33.     NTSTATUS status = NULL;
  34.     KIRQL kIrql = NULL;
  35.     HANDLE hThread1;
  36.     HANDLE hThread2;
  37.     LARGE_INTEGER time ;
  38.     time.QuadPart = -10 * 1000 * 1000;
  39.     status = PsCreateSystemThread(&hThread1,0,NULL,NULL,NULL,Thread1,NULL);
  40.     status = PsCreateSystemThread(&hThread2, 0, NULL, NULL, NULL, Thread2, NULL);
  41.     KeDelayExecutionThread(KernelMode, 0, &time);
  42.     DbgPrint("驱动加载成功\n");
  43.     pDriver->DriverUnload = UnloadDriver;
  44. }

同步事件