?? tester_x86_w2k.cpp
字號:
/*
* PatchFinder for Windows 2000
* Joanna Rutkowska, joanna at mailsnare dot net
* (c) 2003
*
*/
#define pfServiceNo 0xa1
#define serviceMagic 0xdeadbeaf
#define TF_MASK 0x100 // TF mask in EFLAGS
int _declspec ( naked ) _pfSrv (int magic, int cmd, int* tracebuf) {
_asm {
mov eax, pfServiceNo;
lea edx, [esp+4];
int 2eh;
ret; // FIXME
}
}
int pfSrv (int cmd, int* tracebuf) {
return _pfSrv(serviceMagic, cmd, tracebuf);
}
void clearTFbit () {
_asm {
pushfd;
pop eax;
and eax, 0xfffffeff;
push eax;
popfd;
}
}
void setTFbit () {
_asm {
pushfd;
pop eax;
or eax, 0x100;
push eax;
popfd;
}
}
?? 快捷鍵說明
復制代碼
Ctrl + C
搜索代碼
Ctrl + F
全屏模式
F11
切換主題
Ctrl + Shift + D
顯示快捷鍵
?
增大字號
Ctrl + =
減小字號
Ctrl + -