int 2eh 方式调用Native api 小技巧。但是用的人好像不多。例子: Windows 2000 下 123456789101112131415161718NtQuerySystemInformationNo = 0x97;_declspec(naked)NTSTATUS __stdcall PrivateNtQuerySystemInformation (IN SYSTEM_INFORMATION_CLASS, IN OUT PVOID, IN ULONG, OUT PULONG OPTIONAL){ _asm { mov eax, NtQuerySystemInformationNo lea edx, [esp+4] int 2Eh ret 10h }} #windows int 2eh 方式调用Native api http://usmacd.com/cn/int23_native_api/ Author henices Posted on April 27, 2008 Licensed under 挂钩 NtResumeThread 实现全局Hook Previous 联想 IBM THINKPAD T60装windows 2003/2008红外线设备驱动解决 Next