• <ins id="pjuwb"></ins>
    <blockquote id="pjuwb"><pre id="pjuwb"></pre></blockquote>
    <noscript id="pjuwb"></noscript>
          <sup id="pjuwb"><pre id="pjuwb"></pre></sup>
            <dd id="pjuwb"></dd>
            <abbr id="pjuwb"></abbr>

            S.l.e!ep.¢%

            像打了激速一樣,以四倍的速度運轉,開心的工作
            簡單、開放、平等的公司文化;尊重個性、自由與個人價值;
            posts - 1098, comments - 335, trackbacks - 0, articles - 1
              C++博客 :: 首頁 :: 新隨筆 :: 聯系 :: 聚合  :: 管理

            The Fast Way to ShutDown the computer

            Posted on 2009-11-04 22:02 S.l.e!ep.¢% 閱讀(317) 評論(0)  編輯 收藏 引用 所屬分類: RootKit

            Demo_Executable

            ?

            Introduction

            Sometimes an application just needs to quickly shutdown Windows. Unfortunately, there is no well-documented method to do this, and Microsoft does not support it. In fact, neither do I. However, I am presenting two methods to do so just as a mere idea.

            Disclaimer: I am not responsible for any unwanted behavior of this program. If your computer doesn't start up again afterwards, it is not my fault. The program is presented merely as a "proof of concept".

            Background

            Many of the Nt/Zw functions inside the Windows kernel are documented, but some are not. The NtShutdownSystem function is documented pretty well here at NTInternals. The NtSetSystemPowerState function, however, is not.

            At the final stages of the Windows shutdown process, NtShutdownSystem is called. It is responsible for shutting down all drivers, flushing Registry hives and the disc cache, clearing the page file, etc. After doing so, it calls the NtSetSystemPowerState function.

            NtSetSystemPowerState then causes all plug-and-play devices to be shut down and the system to be either halted, powered off, or rebooted.

            However, calling these two functions without notifying the system first is extremely dangerous, and may cause instability in the system.

            Using the code

            Both NtShutdownSystem and NtSetSystemPowerState are inside NTDLL.DLL, which is why we have to load it first. We also have to enable the SE_SHUTDOWN_NAME privilege in order to call it:

            Collapse Copy Code
            OpenProcessToken(GetCurrentProcess(),TOKEN_QUERY|TOKEN_ADJUST_PRIVILEGES, &hToken);
            LookupPrivilegeValue(NULL, SE_SHUTDOWN_NAME, &tkp.Privileges[0].Luid);
            tkp.PrivilegeCount = 1;
            tkp.Privileges[0].Attributes = SE_PRIVILEGE_ENABLED;
            AdjustTokenPrivileges(hToken, FALSE, &tkp, 0, NULL, 0);
            CloseHandle(hToken); 
            
            hNTDLL = LoadLibrary("NTDLL.DLL");

            After doing so, we obtain the functions:

            Collapse Copy Code
            				typedef DWORD (WINAPI* lpNtShutdownSystem)(SHUTDOWN_ACTION Action);
            lpNtShutdownSystem NtShutdownSystem = 
               (lpNtShutdownSystem)GetProcAddress(hNTDLL, "NtShutdownSystem");
            
            typedef DWORD (WINAPI* lpNtSetSystemPowerState)(
            IN POWER_ACTION SystemAction,IN SYSTEM_POWER_STATE MinSystemState,IN ULONG Flags);
            lpNtSetSystemPowerState NtSetSystemPowerState =
               (lpNtSetSystemPowerState)GetProcAddress(hNTDLL, "NtSetSystemPowerState");

            As the typedefs show, NtShutdownSystem requires a SHUTDOWN_ACTION parameter, which is documented here. The three options, ShutdownNoReboot, ShutdownReboot, and ShutdownPowerOff are self-explanatory.

            NtSetSystemPowerState is a bit more complicated. Microsoft makes it a bit easier for us by documenting all three parameters. The first two, POWER_ACTION and SYSTEM_POWER_STATE, are documented well. The third, flags, is simply the reason for shutdown, which is also documented here on MSDN.

            Calling the actual functions is rather simple:

            Collapse Copy Code
            				void CEmergency_ShutdownDlg::OnShutdown() 
            {
                if (NtShutdownSystem)
                {
                    DWORD returnval = NtShutdownSystem(ShutdownPowerOff);
                    if (returnval != 0) FormatNtMessage(returnval);
                }
            }
            
            void CEmergency_ShutdownDlg::OnPowerdown() 
            {
                if (NtSetSystemPowerState)
                {
                    DWORD returnval = NtSetSystemPowerState(
                        PowerActionShutdownOff,
                        PowerSystemShutdown,
                        SHTDN_REASON_MAJOR_OTHER | 
                                   SHTDN_REASON_MINOR_OTHER | 
                                   SHTDN_REASON_FLAG_PLANNED
                        );
                    if (returnval != 0) FormatNtMessage(returnval);
                }
            }

            FormatNtMessage is simply a specialized function to display an error, given an NTSTATUS error code. It uses the FormatMessage function.

            Points of interest

            Only one point of interest: save all un-saved work before executing any one of the functions, or else it'd be rather interesting what happens to them.

            History

            I probably won't be updating this, unless there is a critical flaw anywhere in the code.

            • v1.0 - March 16, 2009.

            License

            This article, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

            About the Author

            hxhl95


            Member
            A random 14 year old guy in Vancouver with an avid interest in how Windows works. Started coding a few years ago, beginning with a bit of game design using GDI+ and some Windows programming. Recently moved onto messing with the Windows kernel and hoping to get into algorithm design soon.

            http://xkcd.com/424/
            Location: Canada Canada

            Other popular Win32/64 SDK & OS articles:

            久久乐国产综合亚洲精品| 狠狠色丁香久久婷婷综合_中| 午夜不卡久久精品无码免费| 久久久久人妻精品一区| 国产午夜久久影院| 久久天天躁狠狠躁夜夜不卡| 亚洲成色999久久网站| 久久久亚洲欧洲日产国码是AV| 7777久久亚洲中文字幕| 三级片免费观看久久| 欧美亚洲国产精品久久蜜芽| 久久亚洲精品无码播放| 久久91精品国产91久久户| 久久久久久精品久久久久| 久久久WWW成人免费精品| 久久精品水蜜桃av综合天堂| 伊人 久久 精品| 欧美精品福利视频一区二区三区久久久精品| 日韩人妻无码一区二区三区久久 | 国产午夜久久影院| 国产精品99久久久精品无码| 狠狠色伊人久久精品综合网| 久久久久女人精品毛片| 日韩乱码人妻无码中文字幕久久| 久久久久久亚洲精品无码| 亚洲狠狠久久综合一区77777| 久久精品国产亚洲AV麻豆网站| 狠狠色综合网站久久久久久久高清| 欧洲国产伦久久久久久久| 久久久久亚洲精品无码网址 | 中文字幕久久久久人妻| 久久伊人亚洲AV无码网站| 久久av免费天堂小草播放| 国产ww久久久久久久久久| 色综合久久久久| 精品99久久aaa一级毛片| 精品视频久久久久| 香蕉久久夜色精品国产尤物| 亚洲&#228;v永久无码精品天堂久久 | 亚洲欧洲中文日韩久久AV乱码| 国内精品久久久久久久coent|