调用微软未公开ZwQueryInformationThread函数根据线程句柄获取线程ID

这段时间公司项目中为了支持XP系统同事代码中用到了

GetThreadId

这个微软的API 但是这个API最低支持版本是

Windows version Windows Vista [desktop apps | UWP apps] Windows Server 2003 [desktop apps | UWP apps]

最后使用了

ZwQueryInformationThread 来解决

解决以后记录下 如果又遇到同样问题的 可以参考

参考文档

http://undocumented.ntinternals.net/index.html?page=UserMode%2FUndocumented%20Functions%2FNT%20Objects%2FThread%2FTHREAD_INFORMATION_CLASS.html

具体代码如下：

 #include "stdafx.h"
 #include <Windows.h>
 #define STATUS_SUCCESS                   ((NTSTATUS)0x00000000L)    // ntsubauth
 typedef enum _THREADINFOCLASS {
     ThreadBasicInformation = ,
     ThreadTimes = ,
     ThreadPriority = ,
     ThreadBasePriority = ,
     ThreadAffinityMask = ,
     ThreadImpersonationToken = ,
     ThreadDescriptorTableEntry = ,
     ThreadEnableAlignmentFaultFixup = ,
     ThreadEventPair_Reusable = ,
     ThreadQuerySetWin32StartAddress = ,
     ThreadZeroTlsCell = ,
     ThreadPerformanceCount = ,
     ThreadAmILastThread = ,
     ThreadIdealProcessor = ,
     ThreadPriorityBoost = ,
     ThreadSetTlsArrayAddress = ,   // Obsolete
     ThreadIsIoPending = ,
     ThreadHideFromDebugger = ,
     ThreadBreakOnTermination = ,
     ThreadSwitchLegacyState = ,
     ThreadIsTerminated = ,
     ThreadLastSystemCall = ,
     ThreadIoPriority = ,
     ThreadCycleTime = ,
     ThreadPagePriority = ,
     ThreadActualBasePriority = ,
     ThreadTebInformation = ,
     ThreadCSwitchMon = ,   // Obsolete
     ThreadCSwitchPmu = ,
     ThreadWow64Context = ,
     ThreadGroupInformation = ,
     ThreadUmsInformation = ,   // UMS
     ThreadCounterProfiling = ,
     ThreadIdealProcessorEx = ,
     ThreadCpuAccountingInformation = ,
     ThreadSuspendCount = ,
     ThreadActualGroupAffinity = ,
     ThreadDynamicCodePolicyInfo = ,
     MaxThreadInfoClass = ,
 } THREADINFOCLASS;
 typedef NTSTATUS (WINAPI*ZWQUERYINFORMATIONTHREAD)(
     _In_      HANDLE          ThreadHandle,
     _In_      THREADINFOCLASS ThreadInformationClass,
     _In_      PVOID           ThreadInformation,
     _In_      ULONG           ThreadInformationLength,
     _Out_opt_ PULONG          ReturnLength
 );
 typedef struct _CLIENT_ID {
     DWORD UniqueProcess;
     DWORD UniqueThread;
 } CLIENT_ID;
 typedef CLIENT_ID *PCLIENT_ID;
 typedef struct _THREAD_BASIC_INFORMATION {
     NTSTATUS                ExitStatus;
     PVOID                   TebBaseAddress;
     CLIENT_ID               ClientId;
     KAFFINITY               AffinityMask;
     LONG               Priority;
     LONG               BasePriority;
 } THREAD_BASIC_INFORMATION, *PTHREAD_BASIC_INFORMATION;
 ZWQUERYINFORMATIONTHREAD ZwQueryInformationThread;
 HMODULE init(LPCSTR szFuncNmae)
 {
     HMODULE hModule = LoadLibrary(_T("ntdll.dll"));
     if (hModule)
         ZwQueryInformationThread = (ZWQUERYINFORMATIONTHREAD)::GetProcAddress(hModule, szFuncNmae);
     return hModule;
 }
 int WINAPI threadProc(LPVOID ARG)
 {
     int i = ;
     while (--i)
     {
         printf("%d\r\n", i);
         Sleep();
     }
     return i;
 }
 int main()
 {
     DWORD dwThreadID = NULL;
     DWORD dwOldThreadID = NULL;
     HMODULE hModule = nullptr;
     hModule = init("ZwQueryInformationThread");
     HANDLE hthread = ::CreateThread(NULL, NULL, (LPTHREAD_START_ROUTINE)threadProc, NULL, NULL, &dwOldThreadID);
     if (hModule && ZwQueryInformationThread)
     {
         THREAD_BASIC_INFORMATION tbi;
         DWORD lRet = NULL;
         ZeroMemory(&tbi, sizeof(THREAD_BASIC_INFORMATION));
         if (ZwQueryInformationThread(hthread, ThreadBasicInformation, &tbi, sizeof(THREAD_BASIC_INFORMATION), &lRet) != STATUS_SUCCESS)
         {
             printf("获取失败\r\n");
         }
         printf("PROCESSid %d ThreadID %d\r\n", tbi.ClientId.UniqueProcess, tbi.ClientId.UniqueThread);
         FreeLibrary(hModule);
     }
 
     CloseHandle(hthread);
     return ;
 }