MyMemCpy_NoPaged

_declspec (naked) void __stdcall MyMemCpy_NoPaged(PVOID pDst, PVOID pSrc, ULONG count) 
{
	__asm {
		pushfd;
		pushad;
		cld;
		mov edi, [esp + 0x4 + 0x24];
		mov esi, [esp + 0x8 + 0x24];
		mov ecx, [esp + 0xC + 0x24];
		mov eax, CR0;
		mov ebx, eax;
		and eax, 0xFFFEFFFF;
		cli;
		mov CR0, eax;
		rep movsb;
		mov CR0, ebx;
		sti;
		popad;
		popfd;
		retn 0xC;
	}
}

自定义 copy 内存 函数，内核下使用。摘自 RProtect 工具。