This commit is contained in:
2026-06-09 14:30:00 +08:00
parent 4d7ffb4136
commit c8aeddb902
4 changed files with 6 additions and 15 deletions
+3 -8
View File
@@ -1,13 +1,10 @@
#include "create_thread_callback.h"
#include "protect_filter.h"
namespace thread_notify_routine
{
//保护的进程ID
auto protect_id = ULongToHandle(8976);
//auto protect_id = ULongToHandle(8976);
void thread_notify_routine(HANDLE ProcessId, HANDLE ThreadId, BOOLEAN Create)
@@ -19,9 +16,6 @@ namespace thread_notify_routine
if (!NT_SUCCESS(status))
goto end;
/*PEPROCESS protect_process{ 0 };
status = PsLookupProcessByProcessId(protect_id, &protect_process);
if (!NT_SUCCESS(status))
@@ -48,8 +42,9 @@ namespace thread_notify_routine
DbgPrintEx(77, 0, "[!] 被创建线程ID: %d\n", ThreadId);
}
end:
end:
ObDereferenceObject(process);
}
}