INT instruction handling

Asked Jul 22 '14 at 08:14

Active Jul 22 '14 at 08:14

Viewed 109 times

How to handle asm int XX instruction (software interrupt) from user mode in kernel mode driver

Can i:

1) add interrupt descriptor in IDT in x64 Windows (how about PatchGuard)?

2) add ISR through IoConnectInterruptEx routine?

asked Jul 22 '14 at 08:14

Cooler113

User-mode code is not supposed to invoke interrupts in Windows. – Seva Alekseyev Jul 22 '14 at 15:26
It appears that the answer is no: http://en.wikipedia.org/wiki/Interrupt_descriptor_table#Hooking – David Wohlferd Jul 22 '14 at 23:34

0 Answers0