如何在WinXP设备驱动程序中根据线程ID获取线程句柄?

2025-05-07 19:01:13
推荐回答(1个)
回答(1):

HANDLE hThreadId = XXXXX;
PVOID pEThread = NULL;
HANDLE hThread = NULL;
PsLookupThreadByThreadId( ThreadId, &pEThread );
ObOpenObjectByPointer( pEThread, OBJ_KERNEL_HANDLE, NULL, NULL, **PsThreadType, KernelMode, &hThread );
ObDereferenceObject( pEThread );