ResumeThread

From aldeid
Jump to navigation Jump to search

Description

Resumes a previously suspended thread. ResumeThread is used as part of several injection techniques.

Syntax

DWORD WINAPI ResumeThread(
  _In_  HANDLE hThread
);

Parameters

hThread [in]
A handle to the thread to be restarted.
This handle must have the THREAD_SUSPEND_RESUME access right.

Return value

If the function succeeds, the return value is the thread's previous suspend count.

If the function fails, the return value is (DWORD) -1. To get extended error information, call GetLastError.