windows资料_win int 2Eh的资料集合(二)
<br />下面是反汇编ntdll.dll的NtCreateEvent部分 NtCreateEvent调用了int 2E<br />Exported fn(): NtCreateEvent - Ord:005Ah<br />Exported fn(): ZwCreateEvent - Ord:02E2h<br />:77F83219 B81E000000 mov eax, 0000001E<br />:77F8321E 8D542404 lea edx, dword
转载
2011-04-08 11:38:00 ·
1771 阅读 ·
0 评论