7 replies to this topic

[Tony]

Im trying to invoke ZwCreateThread. But since it is a undocumented function i don't know how to do it. The 7'th arguement of the function PINITIAL_TEB  UserStack.

How to initialize this structure to use it in ZwCreateThread?

 

Dont give me cpp examples cuz all of them are not functiona in asm.

[Danyfirex]

maybe this can help

 

Please Login or Register to see this Hidden Content

Please Login or Register to see this Hidden Content

 

 

saludos

[Tony]

Thanks man, however I can't use such cpp examples in asm...

[x58]

Have a look at those forums.

Please Login or Register to see this Hidden Content

Please Login or Register to see this Hidden Content

Please Login or Register to see this Hidden Content

Maybe this can help you, good luck.

[Tony]

Useless, thanks anyway.

[Jochen]

I think you need this  -->

Please Login or Register to see this Hidden Content

Allso read here -->

Please Login or Register to see this Hidden Content

[LeFF]

why not using RtlCreateUserThread in the first place?

[Tony]

Problem solved. Thanks guys =]