I can't describe the method for obvious reasons, but the above will not work as GetProcAddress will only return a pointer to the function in your own process space, so you'll only be modifying the call for yourself. Other processes will run the unmodified code as they'll be in a different process context.
Originally posted by bennyandthejets
Elixia, how is it possible to intercept all calls to EnumProcesses? At first guesses I could only think of doing some dodgy thing like using GetProcAddress() and planting my own function there.