FilesExpand file tree

 master

/

wow64_test.cpp

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

24 lines (18 loc) · 610 Bytes

 master

/

wow64_test.cpp

Copy path

Top

File metadata and controls

• Code
• Blame

24 lines (18 loc) · 610 Bytes

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

#include <windows.h>

#include <stdio.h>

// IsWow64 returns -1 (TRUE) if under Wow64, else 0 (FALSE)

/* Copyright (c) 2014 Kevin Devine */

/* Size = 4 bytes */

char IsWow64[] = {

/* 0000 */ "\x33\xC0" /* xor eax, eax */

/* 0002 */ "\x48" /* dec eax */

/* 0003 */ "\xC3" /* ret */

};

int main( void )

{

void *exec = VirtualAlloc(0, strlen (IsWow64) + MAX_PATH,

MEM_COMMIT, PAGE_EXECUTE_READWRITE);

memcpy (exec, IsWow64, strlen (IsWow64));

printf ("\nRunning under Wow64? : %s\n", ((BOOL(*)())exec)() ? "Yes" : "No");

VirtualFree (exec, 0, MEM_RELEASE);

}