.286
.model TINY
extrn _EntryBoot:near
.code
org 07c00h
main:
jmp short start
nop
start:
cli
mov ax,cs
mov ds,ax
mov es,ax
mov ss,ax
mov bp,7c00h
mov sp,7c00h
sti
call _EntryBoot
ret
END main
As for the EntryBoot function it is quite obvious on what it does. It prints out specified text which would be defined (with a #define tag).
Now all I want to do is to load any version of Windows which does not support a hot-patch prologue for KiFastSystemCall function in Ring3 such as XP sp3 , Vista , Windows 7 don't know if KiFastSystemCall has a hot-patch prologue in Windows 8. Obviously this means that that the Kernel should be x86 but it also must be x86 because if the OS is x64 the Patch Guard will stop it from writing
Any ways how can I find the the kernels of those listed OS.