Function CreateUserThread

Source/Client/NM_Sys/API/ProcessesUtils.cpp:177–189

		_IRQL_requires_max_(PASSIVE_LEVEL)
		NTSTATUS CreateUserThread(HANDLE hProcess, IN _UserThreadRoutine StartAddress, IN PVOID Argument, BOOLEAN CreateSuspended, OUT PHANDLE hThread, OUT PCLIENT_ID ClientId)
		{
			using _RtlCreateUserThread = NTSTATUS (NTAPI*)(IN HANDLE ProcessHandle, IN PSECURITY_DESCRIPTOR SecurityDescriptor, IN BOOLEAN CreateSuspended,
				IN ULONG StackZeroBits, IN OUT PULONG StackReserved, IN OUT PULONG StackCommit, IN PVOID StartAddress, IN PVOID StartParameter, OUT PHANDLE ThreadHandle,
				OUT PCLIENT_ID ClientID
			);

			static auto _CreateUserThread = static_cast<_RtlCreateUserThread>(Importer::GetKernelProcAddress(L"RtlCreateUserThread"));
			if (_CreateUserThread)
				return _CreateUserThread(hProcess, NULL, CreateSuspended, 0, NULL, NULL, StartAddress, Argument, hThread, ClientId);

			return STATUS_NOT_IMPLEMENTED;
		}

		_IRQL_requires_max_(PASSIVE_LEVEL)
		NTSTATUS CreateSystemThread(OPTIONAL HANDLE hProcess, PKSTART_ROUTINE StartAddress, PVOID Argument, OUT PHANDLE hThread, OUT PCLIENT_ID ClientId)