Skip to content

Instantly share code, notes, and snippets.

@hfiref0x
Last active July 17, 2024 02:24
Show Gist options
  • Save hfiref0x/fc6b636f9f515aa04950b102b4841d3a to your computer and use it in GitHub Desktop.
Save hfiref0x/fc6b636f9f515aa04950b102b4841d3a to your computer and use it in GitHub Desktop.
IoRegisterFileSystem
22000
48 8D 0D 96 F9 44 00 lea rcx, IopDiskFileSystemQueueHead
48 8B 43 08 mov rax, [rbx+8]
48 8D 0D AE F8 44 00 lea rcx, IopCdRomFileSystemQueueHead
E9 03 FF FF FF jmp loc_1407F745A
48 8D 0D 82 F8 44 00 lea rcx, IopNetworkFileSystemQueueHead
E9 00 FF FF FF jmp loc_1407F7463
48 8D 0D 5D F8 44 00 lea rcx, IopTapeFileSystemQueueHead
E9 E2 FE FF FF jmp loc_1407F745A
22621
48 8D 15 B1 85 41 00 lea rdx, IopDiskFileSystemQueueHead
0F BA 68 10 07 bts dword ptr [rax+10h], 7
48 8D 15 A5 84 41 00 lea rdx, IopCdRomFileSystemQueueHead
0F BA 68 10 07 bts dword ptr [rax+10h], 7
48 8D 15 A6 84 41 00 lea rdx, IopNetworkFileSystemQueueHead
E9 EC FE FF FF jmp loc_14084511B
48 8D 15 9D 84 41 00 lea rdx, IopTapeFileSystemQueueHead
0F BA 68 10 07 bts dword ptr [rax+10h], 7
22631
48 8D 15 91 94 3F 00 lea rdx, IopDiskFileSystemQueueHead
0F BA 68 10 07 bts dword ptr [rax+10h], 7
48 8D 15 C5 93 3F 00 lea rdx, IopCdRomFileSystemQueueHead
0F BA 68 10 07 bts dword ptr [rax+10h], 7
48 8D 15 C6 93 3F 00 lea rdx, IopNetworkFileSystemQueueHead
E9 EC FE FF FF jmp loc_14086414B
48 8D 15 7D 93 3F 00 lea rdx, IopTapeFileSystemQueueHead
0F BA 68 10 07 bts dword ptr [rax+10h], 7
26100
48 8D 15 74 9A 8A 00 lea rdx, IopNetworkFileSystemQueueHead
EB 5C jmp short loc_1406E165A
48 8D 15 82 9A 8A 00 lea rdx, IopCdRomFileSystemQueueHead
0F BA 68 10 07 bts dword ptr [rax+10h], 7
48 8D 15 74 9A 8A 00 lea rdx, IopDiskFileSystemQueueHead
0F BA 68 10 07 bts dword ptr [rax+10h], 7
48 8D 15 32 9A 8A 00 lea rdx, IopTapeFileSystemQueueHead
0F BA 68 10 07 bts dword ptr [rax+10h], 7
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment