blob: 1a2ba6503b36876772b7783ceb352c13e57fb1b7 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
|
%define USER_CODE_SEGMENT 0x18
%define USER_DATA_SEGMENT 0x20
%define RING3_MASK 0b11
%define INTERRUPT_FLAG 0x200
global proc_jump_userspace
extern _esp
extern _eip
proc_jump_userspace:
cli
mov ax, USER_DATA_SEGMENT | RING3_MASK
mov ds, ax
mov es, ax
mov fs, ax
mov gs, ax
mov eax, dword [_esp]
push USER_DATA_SEGMENT | RING3_MASK
push eax
pushf
pop eax
or eax, INTERRUPT_FLAG
push eax
push USER_CODE_SEGMENT | RING3_MASK
push dword [_eip]
iret
|
