#include "pch.h"

#include "Thread.h"

#include "SystemInformation.h"

#include "Processes.h"

#include "subprocesstag.h"

using namespace WinSys;

Thread::Thread(HANDLE handle,bool own):_handle(handle),_own(own){ }

WinSys::Thread::Thread(uint32_t tid, ThreadAccessMask accessMask) : _own(true) {

_handle = ::OpenThread(static_cast<ACCESS_MASK>(accessMask), FALSE, tid);

}

WinSys::Thread::~Thread() {

if (_own && _handle)

::CloseHandle(_handle);

}

int Thread::GetMemoryPriority() const {

}

IoPriority Thread::GetIoPriority() const {

}

size_t WinSys::Thread::GetSubProcessTag() const {

THREAD_BASIC_INFORMATION tbi;

auto status = ::NtQueryInformationThread(_handle, ThreadBasicInformation, &tbi, sizeof(tbi), nullptr);

if (!NT_SUCCESS(status))

return 0;

if (tbi.TebBaseAddress == 0)

return 0;

bool is64bit = SystemInformation::GetBasicSystemInfo().MaximumAppAddress > (void*)(1LL << 32);

auto pid = ::GetProcessIdOfThread(_handle);

auto process = Process::OpenById(pid, ProcessAccessMask::QueryLimitedInformation | ProcessAccessMask::VmRead);

if (!process)

return 0;

size_t tag = 0;

if (!is64bit || (process->IsWow64Process() && is64bit)) {

auto teb = (TEB32*)tbi.TebBaseAddress;

::ReadProcessMemory(process->GetHandle(), (BYTE*)teb + offsetof(TEB32, SubProcessTag), &tag, sizeof(ULONG), nullptr);

}

else {

auto teb = (TEB*)tbi.TebBaseAddress;

::ReadProcessMemory(process->GetHandle(), (BYTE*)teb + offsetof(TEB, SubProcessTag), &tag,sizeof(tag), nullptr);

}

return tag;

}

std::wstring Thread::GetServiceNameByTag(uint32_t pid) {

}

ComFlags WinSys::Thread::GetComFlags() const {

THREAD_BASIC_INFORMATION tbi;

auto status = ::NtQueryInformationThread(_handle, ThreadBasicInformation, &tbi, sizeof(tbi), nullptr);

if (!NT_SUCCESS(status))

return ComFlags::Error;

if (tbi.TebBaseAddress == 0)

return ComFlags::Error;

bool is64Bit = SystemInformation::GetBasicSystemInfo().MaximumAppAddress > (void*)(1LL << 32);

auto pid = ::GetProcessIdOfThread(_handle);

auto process = Process::OpenById(pid, ProcessAccessMask::QueryLimitedInformation | ProcessAccessMask::VmRead);

if (!process)

return ComFlags::Error;

void* ole = nullptr;

bool wow = false;

auto teb = tbi.TebBaseAddress;

if (!is64Bit || process->IsWow64Process()) {

wow = true;

auto offset = offsetof(TEB32, ReservedForOle);

::ReadProcessMemory(process->GetHandle(), (BYTE*)teb + offset, &ole, sizeof(ULONG), nullptr);

}

else {

::ReadProcessMemory(process->GetHandle(), (BYTE*)teb + offsetof(TEB, ReservedForOle), &ole, sizeof(ole), nullptr);

}

if (ole == nullptr)

return ComFlags::None;

BYTE buffer[32];

if (!::ReadProcessMemory(process->GetHandle(), ole, buffer, sizeof(buffer), nullptr))

return ComFlags::Error;

auto flags = wow ? (buffer + 12) : (buffer + 20);

return ComFlags(*(DWORD*)flags);

}

bool WinSys::Thread::IsValid() const {

return _handle != nullptr;

}

CpuNumber Thread::GetIdealProcessor() const {

}

std::unique_ptr<Thread> Thread::OpenById(uint32_t tid, ThreadAccessMask accessMask) {

}