1个回答
展开全部
HANDLE hThreadId = XXXXX;
PVOID pEThread = NULL;
HANDLE hThread = NULL;
PsLookupThreadByThreadId( ThreadId, &pEThread );
ObOpenObjectByPointer( pEThread, OBJ_KERNEL_HANDLE, NULL, NULL, **PsThreadType, KernelMode, &hThread );
ObDereferenceObject( pEThread );
PVOID pEThread = NULL;
HANDLE hThread = NULL;
PsLookupThreadByThreadId( ThreadId, &pEThread );
ObOpenObjectByPointer( pEThread, OBJ_KERNEL_HANDLE, NULL, NULL, **PsThreadType, KernelMode, &hThread );
ObDereferenceObject( pEThread );
推荐律师服务:
若未解决您的问题,请您详细描述您的问题,通过百度律临进行免费专业咨询