blob: 3d6bbc40d98b80d779db3b0ba140bf2824def7ea (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
|
%define USER_CODE_SEGMENT 0x18
%define USER_DATA_SEGMENT 0x20
%define RING3_MASK 0b11
global proc_jump_userspace
extern _esp
extern _eip
proc_jump_userspace:
mov ax, USER_DATA_SEGMENT | RING3_MASK
mov ds, ax
mov es, ax
mov fs, ax
mov gs, ax
mov eax, dword [_esp]
push USER_DATA_SEGMENT | RING3_MASK
push eax
pushf
sti
push USER_CODE_SEGMENT | RING3_MASK
push dword [_eip]
iret
|
