Results 1 to 2 of 2

Thread: Setting the Event Pair of a Thread..

  1. #1
    |< x != '+' BanMe's Avatar
    Join Date
    Oct 2008
    Location
    Farmington NH
    Posts
    510
    Blog Entries
    4

    Setting the Event Pair of a Thread..

    This method seems to be no longer in use in XP sp2 or sp3 all supporting API are still there and functionable
    yet the key function NtSetInformationThread with passed in _THREADINFOCLASS.ThreadEventPair return STATUS_INVALID_INFO_CLASS.. EventPairs seem to be no longer needed in the implementation of QuickLPC in the mentioned environments as the POC Server and Client work without a hitch.

    regards BanMe
    Last edited by BanMe; June 19th, 2009 at 22:34.

  2. #2
    Teach, Not Flame Kayaker's Avatar
    Join Date
    Oct 2000
    Posts
    4,079
    Blog Entries
    5
    {EDIT} - You edited your post at the same time I posted this...oh well


    According to the Windows NT/2000 Native API Reference by Gary Nebbet

    THREAD_INFORMATION_CLASS ThreadEventPair

    In Windows 2000 this information class has been removed and STATUS_INFO_CLASS_INVALID is returned.


    Code:
    http://books.google.ca/books?id=Fp1ct-bKYdcC&pg=RA1-PA122&lpg=RA1-PA122&dq=ThreadEventPair&source=bl&ots=ciPwb2wKdO&sig=bzXaxbR19xjF1Hu8ccoUUNlBstY&hl=en&ei=ckQ8Sv7VO8ygmAfYl6yfDg&sa=X&oi=book_result&ct=result&resnum=4

    I've confirmed that in XP with Softice and a global breakpoint on NtSetInformationThread. Change [ebp+0C] to 8 and the function always reaches STATUS_INFO_CLASS_INVALID.


    What about using those other functions related to NtCreateEventPair?

    NtSetLowEventPair
    NtSetHighEventPair
    NtWaitHighEventPair
    NtWaitLowEventPair
    NtSetHighWaitLowEventPair

Similar Threads

  1. Suspend Thread and Resume Thread
    By ring0 in forum The Newbie Forum
    Replies: 0
    Last Post: January 18th, 2009, 04:10
  2. Setting breakpoints in dll's
    By Solus in forum OllyDbg Support Forums
    Replies: 1
    Last Post: November 19th, 2005, 12:14
  3. New Re-Pair. Version 0.6
    By Crudd in forum Tools of Our Trade (TOT) Messageboard
    Replies: 0
    Last Post: July 1st, 2005, 13:36
  4. Re-Pair 0.2
    By Crudd in forum Tools of Our Trade (TOT) Messageboard
    Replies: 6
    Last Post: April 16th, 2005, 06:29
  5. Setting breakpoint on WM_COMMAND
    By dandy in forum OllyDbg Support Forums
    Replies: 1
    Last Post: March 20th, 2004, 05:32

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •