I am trying to make something similar to task manager but when I call
PsSetCreateProcessNotifyRoutine it returns this error: The specified
procedure could not be found.
It means that it's first parameter, the one which should have been the
pointer to a procedure for callback is not recognised.
I have my callback defined like this:
VOID ProcMgrGabi(IN HANDLE ParentId, IN HANDLE ProcessId,BOOL Create)
{

etc etc etc;


}


and I call the function like this:
rc=PsSetCreateProcessNotifyRoutine(ProcMgrGabi,FAL SE);
and rc returns that error
what can it be