This structure defines a list of process or thread creation attributes.
TotalLength
- the size of the entire structure in bytes, including the header. To storeN
attributes, the value should besizeof(PS_ATTRIBUTE_LIST) + (N - 1) * sizeof(PS_ATTRIBUTE)
due to the header including one attribute by default.Attributes
- the array ofPS_ATTRIBUTE
structures.
PS_ATTRIBUTE
PS_ATTRIBUTE_NUM
NtCreateThreadEx
NtCreateUserProcess