NtCreateProcessEx anyone?

Hi,

in Windows XP, a new function NtCreateProcessEx has been added
to the kernel. Has anybody figured out the function prototype yet?

Thanks in advance,

Holger Thiele
D.A.V.I.D. GmbH
xxxxx@david-gmbh.de
www.david-gmbh.de


You are currently subscribed to ntdev as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com

The prototype appears to be the same as the one for NtCreateProcess, except
an extra 4 byte value (DWORD/HANDLE/etc.) has been added as the last
parameter. I haven’t had a chance to trace through and see what the new
parameter is used for.

–Tom


You are currently subscribed to ntdev as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com