Skip to content

Instantly share code, notes, and snippets.

@swwwolf
Created December 14, 2014 21:14
Show Gist options
  • Save swwwolf/139522045acaac7474eb to your computer and use it in GitHub Desktop.
Save swwwolf/139522045acaac7474eb to your computer and use it in GitHub Desktop.
NTSTATUS SetCreateThreadNotifyRoutine(IN PCREATE_THREAD_NOTIFY_ROUTINE NotifyRoutine) {
PAGED_CODE();
if ( !NotifyRoutine )
return STATUS_INVALID_PARAMETER;
return PsSetCreateThreadNotifyRoutine(NotifyRoutine);
}
VOID CreateThreadNotifyRoutine(IN HANDLE ProcessId, IN HANDLE ThreadId, IN BOOLEAN Create) {
PAGED_CODE();
KdPrint(("CreateThreadNotifyRoutine called with ProcessId = 0x%08X, ThreadId = 0x%08X, Create = %d\n", ProcessId, ThreadId, Create));
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment