Added K32EnnumProcesses hook

hook_process.c

@@ -1485,4 +1485,15 @@ HOOKDEF(BOOL, WINAPI, EnumProcesses,
 	BOOL ret = Old_EnumProcesses(pProcessIds, cb, pBytesReturned);
 	LOQ_bool("process", "pip", "Proccess IDs", pProcessIds, "cb", cb, "Bytes Returned", pBytesReturned); // Modify category, LOQ_ function and log message according to your needs
 	return ret;
+}
+
+HOOKDEF(BOOL, WINAPI, K32EnumProcesses,
+	_Out_ DWORD* pProcessIds,
+	_In_ DWORD cb,
+	_Out_ DWORD* pBytesReturned
+) {
+	DebuggerOutput("[***** DEBUG MESSAGE - EXTENDED HOOKS *****] Hooked K32EnumProcesses\n");
+	BOOL ret = Old_K32EnumProcesses(pProcessIds, cb, pBytesReturned);
+	LOQ_bool("process", "pip", "Proccess IDs", pProcessIds, "cb", cb, "Bytes Returned", pBytesReturned); // Modify category, LOQ_ function and log message according to your needs
+	return ret;
 }

hooks.c

@@ -671,6 +671,7 @@ hook_t full_hooks[] = {
 	HOOK(kernel32, ExpandEnvironmentStringsA),
 	HOOK(kernel32, ExpandEnvironmentStringsW),
 	HOOK(kernel32, EnumProcesses),
+	HOOK(kernel32, K32EnumProcesses),
 };
 
 // This hook set is intended to include only hooks which are necessary

hooks.h

@@ -3762,4 +3762,10 @@ HOOKDEF(BOOL, WINAPI, EnumProcesses,
 	_Out_ DWORD* pProcessIds,
 	_In_ DWORD cb,
 	_Out_ DWORD* pBytesReturned
+);
+
+HOOKDEF(BOOL, WINAPI, K32EnumProcesses,
+	_Out_ DWORD* pProcessIds,
+	_In_ DWORD cb,
+	_Out_ DWORD* pBytesReturned
 );