Source: reverseengineering.stackexchange.com --- Saturday, September 30, 2017
As i understand, from Windows xp, there is a 'sysenter' instruction introduced, instead of 'int 2e' interrupt. But on win 10 there is 'syscall' instruction used in ntdll. So is the 'sysenter' used only for x86 Windows systems? And 'syscall' only for x64 bit systems? ...
from Windows http://ift.tt/2kbjSnj
No comments:
Post a Comment