非常感谢。

HANDLE device;char outputbuff[256]; char * strings[256]; DWORD stringcount;

void thread()
{
DWORD a,x; char msgbuff[512];

while(1)
{
memmove(&a,&outputbuff[0],4);

//if nothing is there, Sleep() 10 ms and check again
if(!a){Sleep(10);continue;}

// looks like our permission is asked. If the file in question is already in the white list,
///give a positive response
char*name=(char*)&outputbuff[8];
for(x=0;x<stringcount;x++)
{
        if(!stricmp(name,strings[x])){a=1;goto skip;}
}

// ask user's permission to run the program
strcpy(msgbuff, "Do you want to run ");
strcat(msgbuff,&outputbuff[8]);

// if user's reply is positive, add the program to the white list
if(IDYES==MessageBox(0, msgbuff,"WARNING",MB_YESNO|MB_ICONQUESTION|0x00200000L))
{a=1; strings[stringcount]=_strdup(name);stringcount++;}
else a=0;

// write response to the buffer, and driver will get it
skip:memmove(&outputbuff[4],&a,4);

//tell the driver to go ahead
a=0;
memmove(&outputbuff[0],&a,4);
}

}

[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课