Hello All ,
I tried to hook interrupt int 2E using IDTR.
I changed the Interrupt handler routine. But I saw this handler is not
getting called for interrupt call 2E with EAX=100D and like that. Why this
happens , or is this correct way ?
How can know when NtGdiXXX functions are called in kernel mode ?