我想HOOK整个系统的CreateProcess
我的DLL入口函数如下BOOL APIENTRY DllMain( HANDLE hModule,DWORD  ul_reason_for_call,LPVOID lpReserved)
{
    switch (ul_reason_for_call)
{
case DLL_PROCESS_ATTACH:
DetourTransactionBegin();
DetourUpdateThread(GetCurrentThread());
DetourAttach(&(PVOID&)Sys_CreateProcessA, HookCreateProcessA);
DetourAttach(&(PVOID&)Sys_CreateProcessW, HookCreateProcessW);
DetourTransactionCommit();
                           break;
case DLL_THREAD_ATTACH:
break;
case DLL_THREAD_DETACH:
                            break;
case DLL_PROCESS_DETACH:
DetourTransactionBegin();
DetourUpdateThread(GetCurrentThread());
DetourDetach(&(PVOID&)Sys_CreateProcessA, HookCreateProcessA);
DetourDetach(&(PVOID&)Sys_CreateProcessW, HookCreateProcessW);
DetourTransactionCommit();
break;
    }
return TRUE;
}在这里这个HOOK好像只拦截主进程这个模块,而其他模块中调用CreateProcess时并没有被拦截
比如说一个进程还有另外一个 XX.dll 而在这个XX.dll中也调用Createprocess,我想知道的是这调用的Createprocess怎么拦截??(我将上面的DetourUpdateThread(GetCurrentThread()); 去掉效果也是一样的!!)