From aldeid
Jump to navigation Jump to search


Used to iterate through the threads of a process. Injectors use these functions to find an appropriate thread to inject into.


BOOL WINAPI Thread32First(
  _In_     HANDLE hSnapshot,
  _Inout_  LPTHREADENTRY32 lpte


hSnapshot [in]
A handle to the snapshot returned from a previous call to the CreateToolhelp32Snapshot function.
lpte [in, out]
A pointer to a THREADENTRY32 structure.

Return value

Returns TRUE if the first entry of the thread list has been copied to the buffer or FALSE otherwise. The ERROR_NO_MORE_FILES error value is returned by the GetLastError function if no threads exist or the snapshot does not contain thread information.