style
This commit is contained in:
@@ -1,13 +1,10 @@
|
||||
#include "create_thread_callback.h"
|
||||
#include "protect_filter.h"
|
||||
|
||||
|
||||
|
||||
|
||||
namespace thread_notify_routine
|
||||
{
|
||||
//保护的进程ID
|
||||
auto protect_id = ULongToHandle(8976);
|
||||
//auto protect_id = ULongToHandle(8976);
|
||||
|
||||
|
||||
void thread_notify_routine(HANDLE ProcessId, HANDLE ThreadId, BOOLEAN Create)
|
||||
@@ -19,9 +16,6 @@ namespace thread_notify_routine
|
||||
if (!NT_SUCCESS(status))
|
||||
goto end;
|
||||
|
||||
|
||||
|
||||
|
||||
/*PEPROCESS protect_process{ 0 };
|
||||
status = PsLookupProcessByProcessId(protect_id, &protect_process);
|
||||
if (!NT_SUCCESS(status))
|
||||
@@ -48,8 +42,9 @@ namespace thread_notify_routine
|
||||
DbgPrintEx(77, 0, "[!] 被创建线程ID: %d\n", ThreadId);
|
||||
}
|
||||
|
||||
|
||||
|
||||
end:
|
||||
end:
|
||||
ObDereferenceObject(process);
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user