![]() |
|
#2
|
|||
|
|||
|
Hello,
Try ZwSuspendThread / ZwResumeThread (Kernel mode Counterpart of SuspendThread & ResumeThread). I don't know if it will works on Kernel mode thread created with PsCreateSystemThread for example... If this is one of your drivers, you should use Kernel events (as user-mode events) : KeSetEvent and KeWaitxxx or KeWaitForSingleObject (or KeWaitForMultipleObjects). There's also some timer routines like KeInitializeTimer(Ex) and KeSetTimer. As usual, you should be carefull about differents IRQL required by those routines. Hope it could help. Regards, Neitsa. |
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Hades:Windows kernel driver lets reverse engineers monitor user and kernel mode code | sh3dow | Source Code | 0 | 05-12-2016 03:15 |
| Use IDA in kernel mode ?? | Veyskarami | General Discussion | 14 | 02-23-2013 12:38 |
| How to pass the large data in kernel mode to user mode? | benina | General Discussion | 3 | 03-06-2010 04:50 |
| Kernel-Mode GUI!? (like SoftIce) | Cobi | General Discussion | 1 | 01-21-2005 02:24 |
| Kernel Mode Driver for NT | SPeY | General Discussion | 12 | 04-22-2004 15:34 |