1

CreateRemoteThread 做什么来实际创建远程线程?

4

2 回答 2

2

Inside the kernel, the lowest level thread creation function is really just creating a thread object, connecting it to a process and making it runnable. CreateThread and CreateRemoteThread are really the same API and work the same way, the only difference being that CreateThread only allows you to create a thread in the current process while CreateRemoteThread allows you to specify a process to create a thread in.

This means that CreateThread is pretty much the same as CreateRemoteThread(GetCurrentProcess(), ....)

于 2010-05-12T02:16:02.507 回答
1

It calls NtCreateThreadEx, which is a kernel call.

于 2010-05-11T10:42:45.070 回答