CreateThread interception, to use CreateRemoteThread

sandbox/win/src/process_thread_interception.h

 // Copyright (c) 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "sandbox/win/src/nt_internals.h"
 #include "sandbox/win/src/sandbox_types.h"
 
 #ifndef SANDBOX_SRC_PROCESS_THREAD_INTERCEPTION_H__
 #define SANDBOX_SRC_PROCESS_THREAD_INTERCEPTION_H__
 
@@ skipping 65 matching lines @@
     LPVOID environment, LPCWSTR current_directory, LPSTARTUPINFOW startup_info,
     LPPROCESS_INFORMATION process_information);
 
 SANDBOX_INTERCEPT BOOL WINAPI TargetCreateProcessA(
     CreateProcessAFunction orig_CreateProcessA, LPCSTR application_name,
     LPSTR command_line, LPSECURITY_ATTRIBUTES process_attributes,
     LPSECURITY_ATTRIBUTES thread_attributes, BOOL inherit_handles, DWORD flags,
     LPVOID environment, LPCSTR current_directory, LPSTARTUPINFOA startup_info,
     LPPROCESS_INFORMATION process_information);
 
+// Interception of CreateThread in kernel32.dll.
+SANDBOX_INTERCEPT HANDLE WINAPI
+TargetCreateThread(CreateThreadFunction orig_CreateThread,
+                   LPSECURITY_ATTRIBUTES thread_attributes,
+                   SIZE_T stack_size,
+                   LPTHREAD_START_ROUTINE start_address,
+                   PVOID parameter,
+                   DWORD creation_flags,
+                   LPDWORD thread_id);
+
 }  // extern "C"
 
 }  // namespace sandbox
 
 #endif  // SANDBOX_SRC_PROCESS_THREAD_INTERCEPTION_H__