005C9EAE /$ 6A 00 push 0x0 ; /pSecurity = NULL
005C9EB0 |. FF7424 08 push dword ptr ss:[esp+0x8] ; |Path
005C9EB4 |. FF15 B4336100 call near dword ptr ds:[<&KERNEL32.Cr>; \CreateDirectoryW
005C9EBA |. 85C0 test eax, eax
005C9EBC |. 75 08 jnz short whoknow4.005C9EC6
005C9EBE |. FF15 C4326100 call near dword ptr ds:[<&KERNEL32.Ge>; [GetLastError
上边是IDM的
================
TC的
RemoveDirectoryA
RemoveDirectoryW
===============
经查看IDM 有此API函数
D:\Users\cuicui
=====================================
下面是TC中拦下的
0041F7FC |. 50 push eax ; /Path
0041F7FD |. E8 1A60FEFF call <jmp.&kernel32.RemoveDirectoryW> ; \RemoveDirectoryW