Click here to Skip to main content
15,883,938 members
Please Sign up or sign in to vote.
3.00/5 (2 votes)
See more:
Hi, i'm trying to write a simple driver (on windows 7 x64) that hook general Protection Exception from idt, i would to know why when i add to my isr a call to an API (like KdPrint) the system hang, i saw that on windows xp must be corrected the value of segment registers, what i need to do on win7?
my goal is to add to my isr a dpc routine that does some functions, it is possible?
thank's for attention and sorry my bad English.

edit:
I think I found the problem, if I add the SWAPGS instruction at the beginning and at the end of my ISR the DPC routine runs fine but now I have the problem that once that the ISR was performed the CPU is in x86 mode
Posted
Updated 27-Jan-13 0:29am
v3
Comments
Sergey Alexandrovich Kryukov 24-Jan-13 14:33pm    
Just one note: even to me, a person who worked in kernel ring so long time ago that I wasn't familiar even with emerging Windows NT (and that's why I hardly can help you), your question looks quite clear. And doable. So, sorry for not helping you, but I voted 5 for this question, and the effort to write in English. Only please capitalize sentences and add blank spaces after ','.
Cheers,
—SA
OriginalGriff 25-Jan-13 7:35am    
Don't bump your question - if you have information to add, then add it, but don't just make a trivial change to get it to teh top of the list.
It's rude, and unnecessary.
It does not help you get an answer, it just annoys those you might have helped you.
Member 8119034 25-Jan-13 10:47am    
I have add blank spaces after ',' as I had been asked
Michael Haephrati 3-Mar-13 13:54pm    
Could you elaborate more? Which type of driver are you trying to create? Is it a Kernel driver? Is there is chance you are blocked by Patch Guard?
Michael Haephrati 7-Mar-13 16:10pm    
You might find Easyhook will be very helpful for that matter.
http://easyhook.codeplex.com/

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)



CodeProject, 20 Bay Street, 11th Floor Toronto, Ontario, Canada M5J 2N8 +1 (416) 849-8900