handler.h

驱动枚举进程,控制线程AFFINITY,通过修改EPROCESS,ETHREAD ,KTHREAD 等结构,修改AFFINITY

#pragma once
#include "hook.h"

#define INT_VECTOR_HANDLER( number ) __declspec( naked ) void interrupt_##number( void ) \
	{ \
		__asm{ PUSHAD }; \
		__asm{ PUSH number }; \
		__asm{ CALL GeneralHandler }; \
		__asm{ POPAD }; \
		__asm{ JMP DWORD PTR [ExternalHandlers + number * 4] }; \
	} 

#define INT_VECTOR_HANDLER_OFFSET( number )	&interrupt_##number

VOID __stdcall
GeneralHandler(												//中断调用计数器加1
		IN	ULONG		iInt );