00401133 > \68 1C394000 push 40391C ; /pProcessInfo = lll.0040391C00401138 . 68 9F344000 push 40349F ; |pStartupInfo = lll.0040349F0040113D . 6A 00 push 0 ; |CurrentDir = NULL0040113F . 6A 00 push 0 ; |pEnvironment = NULL00401141 . 6A 00 push 0 ; |CreationFlags = 000401143 . 6A 00 push 0 ; |InheritHandles = FALSE00401145 . 6A 00 push 0 ; |pThreadSecurity = NULL00401147 . 6A 00 push 0 ; |pProcessSecurity = NULL00401149 . 6A 00 push 0 ; |CommandLine = NULL0040114B . 50 push eax ; |ModuleFileName0040114C . E8 D3080000 call 00401A24 ; \CreateProcessA00401151 . 85C0 test eax, eax
[课程]Android-CTF解题方法汇总!
CREATE_SUSPENDED The primary thread of the new process is created in a suspended state, and does not run until the ResumeThread function is called.