[pso] [tema1 windows] Probleme interceptor - registru eax
Bogdan Nitu
nitubogdan_cc at yahoo.com
Wed Mar 24 17:20:10 EET 2010
_asm mov syscall, eax la mine nu era prima instructiune imediat dupa
declararea variabilelor (mai aveam un DbgPrint) si registrul se pare ca se altera.
La asta nu m-am gandit, oricum la asm volatile era avantajul ca nu se atingea
compilatorul de registrii folositi in cadrul sintaxei asm.
--- On Wed, 3/24/10, Bogdan Nitu <nitubogdan_cc at yahoo.com> wrote:
From: Bogdan Nitu <nitubogdan_cc at yahoo.com>
Subject: [pso] [tema1 windows] Probleme interceptor - registru eax
To: pso at cursuri.cs.pub.ro
Date: Wednesday, March 24, 2010, 4:34 PM
In interceptor reusesc sa iau argumentele (pentru primu intercept din
test_syscall("NtOpenMutant") argumentele sunt 2 126 0)
Nu argumentele sunt problema. Problema este syscall number luat din eax
int syscall; _asm mov syscall, eax trebuie sa puna 512
aia este intrarea de mine alterata si pe acolo trimite testerul (din moment ce
si interceptez), dar eu primesc 1 . E normal? este vreo alta cale sa iau syscall-ul ala?
Multumesc frumos!
-----Inline Attachment Follows-----
_______________________________________________
pso mailing list
pso at cursuri.cs.pub.ro
http://cursuri.cs.pub.ro/cgi-bin/mailman/listinfo/pso
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://cursuri.cs.pub.ro/lurker/list/pso.html/attachments/20100324/243b0d04/attachment.htm>
More information about the pso
mailing list