-
-
[求助]恳请大牛指点 OpenThreadNT 一直打不开句柄
-
发表于:
2010-1-18 06:04
4529
-
[求助]恳请大牛指点 OpenThreadNT 一直打不开句柄
HANDLE OpenThreadNT(ACCESS_MASK dwDesiredAccess,
HANDLE bInheritHandle,
HANDLE dwThreadId)
{
OBJECT_ATTRIBUTES ObjectAttributes;
CLIENT_ID ClientId;
HANDLE hThread;
NTSTATUS Status;
InitializeObjectAttributes(&ObjectAttributes, NULL, 0, NULL, NULL);
if (bInheritHandle)
ObjectAttributes.Attributes = OBJ_INHERIT;
ClientId.UniqueProcess = NULL;
ClientId.UniqueThread = (HANDLE)dwThreadId;
Status = NtOpenThread(&hThread, // Thread handle
dwDesiredAccess, // Access to thread object
&ObjectAttributes, // Object attributes
&ClientId); // Client Id
if (!NT_SUCCESS(Status))
{
//SetLastError(RtlNtStatusToDosError(Status));
return NULL;
}
return hThread;
hThread=OpenThreadNT(THREAD_ALL_ACCESS,FALSE,IDThread);
确定传入的 线程TID 完全正确 就是 句柄 返回0 NtOpenThread 执行返回 8
要疯掉了恳请大牛指点
[培训]《安卓高级研修班(网课)》月薪三万计划,掌握调试、分析还原ollvm、vmp的方法,定制art虚拟机自动化脱壳的方法