How to get the start address of a thread of other processes in the system? ?

cwchb3

rtrtrt

lcdxhj

First use EnumProcesses or CreateToolHelp32SnapShot to enumerate the desired thread id
Then use AdjustPrivillege to adjust access to this thread id, at least including THREAD_GET_CONTEXT
OpenThread returns a thread handle
Then use OpenThreadContext to get the thread context CONTEXT
The EiP (instruction register) value in CONTEXT is the thread start address.

lixiaof6471

startAddress, has such a performance counter, which can be done with PSAPI.

ring2010

PSAPI seems to be in trouble

mkmkmk2

Use ZwQueryInformationThread