CreateThread interception, to use CreateRemoteThread

sandbox/win/src/process_thread_interception.h

Index: sandbox/win/src/process_thread_interception.h
diff --git a/sandbox/win/src/process_thread_interception.h b/sandbox/win/src/process_thread_interception.h
index 31dc231543db5709c9832f795244b720bda1e270..aa9bc0dde9315ca0d333514df7e378a7c90d33f6 100644
--- a/sandbox/win/src/process_thread_interception.h
+++ b/sandbox/win/src/process_thread_interception.h
@@ -83,6 +83,13 @@ SANDBOX_INTERCEPT BOOL WINAPI TargetCreateProcessA(
     LPVOID environment, LPCSTR current_directory, LPSTARTUPINFOA startup_info,
     LPPROCESS_INFORMATION process_information);
 
+// Interception of CreateThread in kernel32.dll.
+SANDBOX_INTERCEPT HANDLE WINAPI TargetCreateThread(
+  CreateThreadFunction orig_CreateThread,
+  LPSECURITY_ATTRIBUTES thread_attributes,
+  SIZE_T stack_size, LPTHREAD_START_ROUTINE start_address, PVOID parameter,
+  DWORD creation_flags, LPDWORD thread_id);
+
 }  // extern "C"
 
 }  // namespace sandbox