3 KeAcquireSpinLockAtDpcLe
MSDN上说明调用KeAcquireSpinLockAtDpcLe
在多核处理器(Windows2003)下
先来查看一下KeAcquireSpinLockAtDpcLe
nt!KeAcquireSpinLockAtDpcLe
nt!KeAcquireSpinLockAtDpcLe
nt!KeAcquireSpinLockAtDpcLe
将KeAcquireSpinLockAtDpcLe
KeAcquireSpinLockAtDpcLe
}
对比一下KfAcquireSpinLock,KeAcquireSpinLockAtDpcLe
KefReleaseSpinLockFromDp
nt!KefReleaseSpinLockFromDp
KefReleaseSpinLockFromDp
在单核处理器(WindowsXP)下
在单核处理器下KfAcquireSpinLock所作的工作就是简单提升一下IRQL到DISPATCH_LEVEL,那么KeAcquireSpinLockAtDpcLe
实际上观察KeAcquireSpinLockAtDpcLe
KefReleaseSpinLockFromDp
分析:
关于KeAcquireSpinLockAtDpcLe
当IRQL=DISPATCH_LEVEL时,驱动调用KeAcquireSpinLockAtDpcLe
其实观察具体实现,KeAcquireSpinLockAtDpcLe