The User-Kernel Boundary Consider the following disassembly of a function in the ntdll.dll system library ofa 64-bit Windows 8.1. What purpose does this function serve? What is the meaningof the...



The User-Kernel Boundary


Consider the following disassembly of a function in the ntdll.dll system library of
a 64-bit Windows 8.1. What purpose does this function serve? What is the meaning
of the number marked in bold?


; NtCreateProcess<br>4C 8B D1<br>B8 AA 00 00 00<br>.text:0000000180092120<br>mov<br>r10, rc<br>rcx<br>.text:0000000180092123<br>eax, OAAh<br>móv<br>.text:0000000180092128<br>OF 05<br>syscall<br>.text:000000018009212A<br>C3<br>retn<br>

Extracted text: ; NtCreateProcess 4C 8B D1 B8 AA 00 00 00 .text:0000000180092120 mov r10, rc rcx .text:0000000180092123 eax, OAAh móv .text:0000000180092128 OF 05 syscall .text:000000018009212A C3 retn

Jun 11, 2022
SOLUTION.PDF
SOLUTION.PDF

Get Answer To This Question

Related Questions & Answers

More Questions »

Submit New Assignment

Copy and Paste Your Assignment Here
Have files?