How ZwCreateThreadEx used in R0
R3 before I pick up my address and then spread to the R0 but not taught how to use the effect

CodePudding user response:

Driven by PsCreateSystemThread create a thread

CodePudding user response:

NTDLL. DLL without export ZwCreateThreadEx interfaces

CodePudding user response:

refer to the second floor 7-eleven's response:

NTDLL. DLL without export ZwCreateThreadEx interface

I are in the process of other similar remote execution CALL injection in r3 have no permissions so only in r0