#include <iostream>
#include <windows.h>
#include <process.h>
#include <excpt.h>

int filter(unsigned int code, struct _EXCEPTION_POINTERS *ep) ;


unsigned  __stdcall ThreadFunc(void * pArguments)
{
	
	__try
	{
		 HANDLE hevent = (HANDLE)pArguments;

		 DWORD wait_result = WaitForSingleObject(hevent, INFINITE);
		 if (wait_result == WAIT_OBJECT_0)
		 {
			 
			 ::MessageBox(NULL, TEXT("second thread was running...."), TEXT("second thread"), MB_OK);
			 //如果messagebox返回，则系统重新唤醒线程二，当线程收到消息时，系统会唤醒该线程处理消息
			 ::SetEvent(hevent);//在这里通知主线程，你可以挂起我了....
			 ::WaitForSingleObject(hevent, INFINITE);

		 }
	
	}
	__except(filter(GetExceptionCode(), GetExceptionInformation()))
	{
		
		MessageBox(NULL, TEXT("handling exception..."), TEXT("except"), MB_OK);
	}
	
	return 0;//normal exit...
}


int filter(unsigned int code, struct _EXCEPTION_POINTERS *ep) 
{

	if (code == EXCEPTION_ACCESS_VIOLATION) 
	{
      printf("EXCEPTION_ACCESS_VIOLATION catched!...\n");
	  printf("the exception address: %x\n", ep->ExceptionRecord->ExceptionAddress);
	  printf("the exception flags: %0x\n", ep->ExceptionRecord->ExceptionFlags);
	  printf("the exception information: %0x\n", ep->ExceptionRecord->ExceptionInformation);
      return EXCEPTION_EXECUTE_HANDLER;//返回这个表明线程二知道异常的产生，我自己能处理，控制权交给我

    }
    else 
	{

      return EXCEPTION_CONTINUE_SEARCH;//向上回滚，此时运行库捕获该异常，意味着该程序要挂了，

    }

}



int main()
{
	unsigned thread_id = 0;
	HANDLE hthread = NULL;
	CONTEXT context;
	context.ContextFlags = CONTEXT_FULL; //使用context之前必须得初始化该参数
    HANDLE hevent = NULL;
	__try
	{
		hevent = ::CreateEvent(NULL, TRUE, FALSE, NULL);
		if (hevent == NULL)
		{
			printf("Create event error: %d",::GetLastError());
			__leave;
		}

		hthread = (HANDLE) _beginthreadex(NULL, 0, &ThreadFunc, (void *)hevent, 0, &thread_id);
		if (hthread == NULL)
		{
			printf("beginthreadex error: %d\n",::GetLastError());
			__leave;
		}

		::SetEvent(hevent);//让线程二弹messagebox
		::Sleep(0);//放弃主线程的剩余时间片，让第二个线程得到CPU，不能省，否则线程二得不到CPU，不能弹出messagebox
		::ResetEvent(hevent);//将事件设置成未通知的状态，这句的执行是在线程二弹出messagebox之后，此时，线程二堵塞住，主线程得到CPU
		
		::WaitForSingleObject(hevent, INFINITE);//主线程等待线程二的通知，主线程堵塞，线程二得到CPU
		if (::SuspendThread(hthread) == (DWORD)-1)
		{
			printf("suspendthread error: %d\n", ::GetLastError());
			__leave;
		}

		printf("suspend thread ok！\n");

		if (!::GetThreadContext(hthread, &context))
		{
			printf("getthreadcontext error: %d\n",::GetLastError());
			__leave;
		}

		printf("getthread context success!\n");

		context.Eip = 0x00010000;//这句将刚创建的线程的指令指针修改，会导致访问违规

		if (!::SetThreadContext(hthread, &context))
		{
			printf("setthreadcontext error: %d\n", ::GetLastError());
			__leave;
		}

		printf("setthread context success!\n");

		if (::ResumeThread(hthread) == (DWORD)-1)
		{
			printf("resume thread error: %d\n",::GetLastError());
			__leave;
		}

		printf("resume thread ok!\n");

		
		//::Sleep(3000);
		if (WaitForSingleObject(hthread, INFINITE) == WAIT_OBJECT_0)
		{
			printf("the second thread exit... now in main thread..\n");
		}
		


	}	
	__finally
	{
		if (hthread != NULL)
			::CloseHandle(hthread);
	}


	return 0;
}

int main()
{
	
	HANDLE hthread = NULL;
	CONTEXT context;
	context.ContextFlags = CONTEXT_FULL;
	__try
	{

		HWND hwnd = ::FindWindow(NULL, TEXT("QQ2011"));
		if (hwnd == NULL)
			__leave;
		DWORD process_id = 0;
		DWORD thread_id = 0;
		thread_id = GetWindowThreadProcessId(hwnd, &process_id);
		
		hthread = ::OpenThread(THREAD_GET_CONTEXT | THREAD_SET_CONTEXT | THREAD_SUSPEND_RESUME, FALSE, thread_id);
		if (hthread == NULL)
		{
			printf("openThread error: %d\n", ::GetLastError());
			__leave;
		}

		if (::SuspendThread(hthread) == (DWORD)-1)
		{
			printf("SuspendThread error:%d\n", ::GetLastError());
			__leave;
		}

		if (!::GetThreadContext(hthread, &context))
		{
			printf("getThreadcontext errror:%d\n",::GetLastError());
			__leave;
		}

		context.Eip = 0x00010000;
		
		if (!::SetThreadContext(hthread, &context))
		{
			printf("setthreadcontext error:%d\n", ::GetLastError());
			__leave;
		}

		if (::ResumeThread(hthread) == (DWORD)-1)
		{
			printf("resume thread error:%d\n", ::GetLastError());
			__leave;
		}


		
	}
	__finally
	{
		if (hthread != NULL)
			::CloseHandle(hthread);
	}

	return 0;

}