Chap14

File system filter driver, registry filter driver and other kernel and user level tools for capturing user activity on a windows based computer.

一个简单的U盘过滤器驱动程序，能够实现使得U盘只读功能(A simple U-disk filter driver, can be achieved making the U-disk read-only function)

MIL Application Start

在linux环境下编写一个控制台应用程序，程序中有一个共享的整型变量shared_var，初始值为0；创建一个线程并使其立即与主线程并发执行。新创建的线程与主线程均不断地循环，并输出shared_var 的值。主线程在循环中不断地对shared_var 进行加1操作，即每次循环shared_var 被加1；而新创建的线程则不断地对shared_var 进行减1 操作，即每次循环shared_var 被减1。观察程序运行的结果，并对你看到的现象进行解释。(Written in the linux environment a console application, the program has a shared integer variable shared_var, the initial value of 0 create A thread and make it run concurrently with the main thread immediately. The newly created thread and main thread are constantly circulating, and the output shared_var Value. The main thread in a loop constantly on shared_var are incremented, that is plus 1 for each cycle shared_var and the new line created Process is constantly on the shared_var decremented, that is, each cycle shared_var is decreased by 1. Observe the results of running the program, and you To explain the phenomenon seen.)

这是一个C++驱动级内存读写源码，可以实现读写一些受保护游戏的内存。。(This is a C++ source code to read and write memory drive level, you can read and write some of the protected memory game.)

三轴联动数控上位机控制程序，基于美国PARKER运动控制器，适合数控学者使用(Axis linkage CNC PC control program, based on the United States PARKER motion controller for CNC scholars)

通过SCManager的一系列方法，实现了加载sys文件驱动的功能，安装到系统服务中。(Through a series of SCManager method to achieve a load sys file-driven functionality, install system services.)

HOOK SSDT中SetInformation 函数的 驱动程序 配有mfc的用户模式界面 实现了Createfile readfile writefile IOCTL 这几个分发函数 在IOCTL中实现了对SetInformation函数的HOOK (SSDT Hook Driver test with mfc interface )

嵌入式远程监控小车，通过web页面控制小车的前进方向(Embedded remote monitor and control the car, through the web page control of the direction of the car)

驱动隐藏进程源码 通过 SSTD 实现(Driver hidden processes the source code)