Jump to content
Tuts 4 You

Interrupts Access In Windows


Recommended Posts

hi everyone

i am sorry for my bad english

is there any way to interrupts access without using sys file?

for example can i write kernel mode program in a dll?

or can i acess to interrupts with directly using assembly in windows?

please help me

Link to comment

interupts are dead in win32, especialy win64. you have winapi, there are some kernel interupts that today even in xp are raplaced by sysenter

Link to comment

do you see trap flag plugin in ollydbg?

it is in a dll that arrest of trapflag antidbg routine.

how do this plugin work with interrupts ?

is there any sys file for change cpu flags?

Link to comment

better learn something more before giving stupid examples, sorry but no interupts are used today, for int1 int3 there are today exceptions, its should also generate interrupt but this is handled by windows or ring0 drivers. so only thing you get in ring3 is exceptions, you can handle them by you routine,seh or veh. to set flags whats the problem?


pop eax

or eax,1

push eax


and you set flags, problem is what will it generate, probably exception so you need to handle it.

another wat is GetThreadContext and SetThreadContext www.msdn.com

Edited by human
Link to comment

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Create New...