VOID XThreadDiskCloneWrite(PVOID Context)
{
    XDiskCloneInformation *DiskClone = (XDiskCloneInformation *)Context;
    XCopyBuffer *CopyBuffer = DiskClone->CopyBuffer;

    if (KeGetCurrentIrql() != PASSIVE_LEVEL)
    {
        DiskClone->Status = STATUS_UNSUCCESSFUL;
        PsTerminateSystemThread(STATUS_UNSUCCESSFUL);
    }

    UNICODE_STRING DiskName;
    RtlInitUnicodeString(&DiskName, DiskClone->DestinationDiskName);

    OBJECT_ATTRIBUTES ObjectAttributes;
    InitializeObjectAttributes(&ObjectAttributes, &DiskName, OBJ_CASE_INSENSITIVE | OBJ_KERNEL_HANDLE, 0, NULL);

    HANDLE DiskHandle;
    IO_STATUS_BLOCK IoStatusBlock;
    NTSTATUS status = ZwCreateFile(&DiskHandle, SYNCHRONIZE | FILE_WRITE_DATA, &ObjectAttributes, &IoStatusBlock, NULL, FILE_ATTRIBUTE_NORMAL, FILE_SHARE_READ | FILE_SHARE_WRITE, FILE_OPEN, FILE_NON_DIRECTORY_FILE | FILE_WRITE_THROUGH | FILE_NO_INTERMEDIATE_BUFFERING/* | FILE_RANDOM_ACCESS*/, NULL, 0);
    if (!NT_SUCCESS(status))
    {
        xlogError2("Failed to ZwCreateFile()", status);
        DiskClone->Status = status;
        PsTerminateSystemThread(status);
    }

    int Index = 0;
    LARGE_INTEGER TotalWriteSize = {0, 0};
    int CopyBufferNumber = sizeof(DiskClone->CopyBuffer)/sizeof(XCopyBuffer);

    xlogInfo("磁盘克隆写开始");

    ULONG TickCount = XGetTickCount();
    while (TRUE)
    {
        XCopyBuffer *CopyBuffer = (XCopyBuffer*)&DiskClone->CopyBuffer[Index];

        status = ZwWriteFile(DiskHandle, NULL, NULL, Context, &IoStatusBlock, CopyBuffer->Buffer, CopyBuffer->Length, &TotalWriteSize, NULL);
        if (!NT_SUCCESS(status))
        {
            ZwClose(DiskHandle);
            DiskClone->Status = status;
            PsTerminateSystemThread(status);
        }

        TotalWriteSize.QuadPart += CopyBuffer->Length;
        if (TotalWriteSize.QuadPart >= DiskClone->SourceDiskTotalSize.QuadPart)
        {
            xlog("磁盘克隆写完成, index: [%d], write size: [%I64u], spare time: [%d]ms\n", Index, TotalWriteSize, XGetTickCount()-TickCount);

            ZwClose(DiskHandle);
            DiskClone->Status = STATUS_SUCCESS;
            PsTerminateSystemThread(STATUS_SUCCESS);
        }
        
        ++Index;
    }
}

[招生]科锐逆向工程师培训(2025年3月11日实地，远程教学同时开班, 第52期)！