KeInitializeTimer 初始化定时器

KeInitializeTimerEx 初始化定时器

KeSetTimer 开启定时器(只执行一次)

KeSetTimerEx 开启定时器(可以设置循环)

KeInitializeDpc 初始化DPC对象

KeCancelTimer 取消定时器

在驱动中是以100纳秒为单位的
1000纳秒=1微秒
1000微秒=1毫秒
1000毫秒=1秒 ** KTIMER my_timer;//注意要定义全局变量
KDPC KiTimerExpireDpc;//注意要定义全局变量 LARGE_INTEGER duetime = { };
KeInitializeTimerEx(&my_timer, NotificationTimer);
KeInitializeDpc(&KiTimerExpireDpc, (PKDEFERRED_ROUTINE)KiTimerExpirationFunction, NULL);
KeSetTimerEx(&my_timer, duetime, , &KiTimerExpireDpc);
VOID KiTimerExpirationFunction(IN struct _KDPC *Dpc,IN PVOID DeferredContext,IN PVOID SystemArgument1,IN PVOID SystemArgument2
)
{
KdPrint(("定时器....................\n")); }; KeCancelTimer(&my_timer);//取消定时器 另外一种方法/////////////////////////////// typedef struct _DEVICE_EXTENSION { LIST_ENTRY list_head;
KSPIN_LOCK list_lock;
PVOID thread_pointer;
BOOLEAN terminate_thread;
KEVENT request_event;
KTIMER my_timer;
KDPC KiTimerExpireDpc;
} DEVICE_EXTENSION, *PDEVICE_EXTENSION; //创建设备
IoCreateDevice(pDriverObj,sizeof(DEVICE_EXTENSION),NULL,FILE_DEVICE_UNKNOWN,,FALSE,&device_object); device_extension = (PDEVICE_EXTENSION)device_object->DeviceExtension;
//初始化定时器
KeInitializeTimerEx(&device_extension->my_timer, NotificationTimer);
// 初始化定时器过程的DPC对象
KeInitializeDpc(&device_extension->KiTimerExpireDpc,(PKDEFERRED_ROUTINE)KiTimerExpirationFunction, NULL);
//启动定时器
KeSetTimerEx(&device_extension->my_timer, duetime, , &device_extension->KiTimerExpireDpc); device_extension->terminate_thread = FALSE; PDEVICE_EXTENSION device_extension;
device_extension = (PDEVICE_EXTENSION)pDriverObj->DeviceObject->DeviceExtension;
//取消定时器
KeCancelTimer(&device_extension->my_timer);
04-22 17:30