|
|
|
|
|
by dcrazy
5 days ago
|
|
Again, NtCreateProcess does not implement fork(). The fundamental characteristic of fork is that the child is an exact replica of the parent, down to the instruction pointer. Windows does not have a way to create a process object with such a configuration. Also, using the Zw prefix doesn’t make you look more knowledgeable, it makes you look like you’re trying way too hard to borrow credibility. |
|
Why does it matter which prefix I used? They both point to the same routine so my point applies either way.