hookNtCreateThread 可以第一时间注入到目标进程,进程创建后,然后就好调用 NtCreateThread创建主线程-hookNtCreateThread the first time can be injected into the target process, the process is created, then create the main thread is like calling NtCreateThread

驱动注入线程的源码，有关保护方面的知识，NtCreateThread-Driven into the threads of the source, on the protection of the

过TP原理代码 保护方面的知识，感兴趣的多看看，有帮助的-TP had the protection of the principles of the code, interested see more helpful