Quote:
Originally Posted by mono12345
Was ist bitteschön an der ersten Seite so falsch?
|
0012FEC0 75B49051 Q´u /CALL to CreateFileW from KERNELBA.75B4904C
0012FEC4 0065E880 €če. |FileName = "C:\Users\xxxx\AppData\Local\Temp\63C6.tmp"
0012FEC8 80000000 ...€ |Access = GENERIC_READ
0012FECC 00000000 .... |ShareMode = 0
0012FED0 00000000 .... |pSecurity = NULL
0012FED4 00000001 ... |Mode = CREATE_NEW
0012FED8 00000080 €... |Attributes = NORMAL
0012FEDC 00000000 .... \hTemplateFile = NULL