CreateThread interception, to use CreateRemoteThread

sandbox/win/src/process_thread_interception.h

Index: sandbox/win/src/process_thread_interception.h
diff --git a/sandbox/win/src/process_thread_interception.h b/sandbox/win/src/process_thread_interception.h
index 31dc231543db5709c9832f795244b720bda1e270..ddfd89dd99517082955a6cfcb040485f55792c98 100644
--- a/sandbox/win/src/process_thread_interception.h
+++ b/sandbox/win/src/process_thread_interception.h
@@ -83,6 +83,16 @@ SANDBOX_INTERCEPT BOOL WINAPI TargetCreateProcessA(
     LPVOID environment, LPCSTR current_directory, LPSTARTUPINFOA startup_info,
     LPPROCESS_INFORMATION process_information);
 
+// Interception of CreateThread in kernel32.dll.
+SANDBOX_INTERCEPT HANDLE WINAPI
+TargetCreateThread(CreateThreadFunction orig_CreateThread,
+                   LPSECURITY_ATTRIBUTES thread_attributes,
+                   SIZE_T stack_size,
+                   LPTHREAD_START_ROUTINE start_address,
+                   PVOID parameter,
+                   DWORD creation_flags,
+                   LPDWORD thread_id);
+
 }  // extern "C"
 
 }  // namespace sandbox