; 链表操作 将当前APC从用户队列中拆除
eax表示该某个双向链表的节点
struct node{
struct node * next
struct node * last
}
mov ecx, [eax] [eax] Node->next
mov eax, [eax+4] [eax+4] Node->last
mov [eax], ecx Node->last->next = node->next
mov [ecx+4], eax Node->next->last = node->last
原文:https://www.cnblogs.com/onetrainee/p/11785633.html