From 974bd0388994715b4fa35ac54986e3c1ed4e3f55 Mon Sep 17 00:00:00 2001
From: Egor Tensin <Egor.Tensin@gmail.com>
Date: Thu, 27 Apr 2017 19:19:56 +0300
Subject: reorganize files

* src/ -> km/src/
* utils/ -> um/
* Move WDK 7.1-specific *.bat files to km/build/wdk7.1/
* Move WDK 8.1 Update 1 solutions to km/build/wdk8.1update/
---
 src/sysenter/main.c | 106 ----------------------------------------------------
 1 file changed, 106 deletions(-)
 delete mode 100644 src/sysenter/main.c

(limited to 'src/sysenter/main.c')

diff --git a/src/sysenter/main.c b/src/sysenter/main.c
deleted file mode 100644
index 9eb9b28..0000000
--- a/src/sysenter/main.c
+++ /dev/null
@@ -1,106 +0,0 @@
-/*
- * Copyright (c) 2015 Egor Tensin <Egor.Tensin@gmail.com>
- * This file is part of the "Windows 7 drivers" project.
- * For details, see https://github.com/egor-tensin/windows7-drivers.
- * Distributed under the MIT License.
- */
-
-#include <ntddk.h>
-
-static __int64 old_msr_value = 0;
-static void *old_ki_fast_call_entry = NULL;
-
-static void __stdcall log_system_call()
-{
-    static LONG count = 0;
-    static const LONG throttle = 10000;
-
-    LONG n = InterlockedIncrement(&count);
-
-    if (n % throttle == 0)
-        DbgPrint("Another %ld of `sysenter`s (eax=)!\n", throttle);
-}
-
-static void __declspec(naked) new_ki_fast_call_entry()
-{
-    __asm
-    {
-        pushad
-        pushfd
-        mov ecx, 0x23
-        push 0x30
-        pop fs
-        mov ds, cx
-        mov es, cx
-        call log_system_call
-        popfd
-        popad
-        jmp [old_ki_fast_call_entry]
-    }
-}
-
-#define IA32_SYSENTER_EIP 0x176
-
-static void hook_sysenter()
-{
-    /*
-    __asm
-    {
-        mov ecx, IA32_SYSENTER_EIP
-        rdmsr
-        mov old_ki_fast_call_entry, eax
-        mov eax, new_ki_fast_call_entry
-        xor edx, edx
-        wrmsr
-    }
-    */
-
-    old_msr_value = __readmsr(IA32_SYSENTER_EIP);
-#pragma warning(push)
-#pragma warning(disable: 4305)
-    old_ki_fast_call_entry = (void *) old_msr_value;
-#pragma warning(pop)
-    __writemsr(IA32_SYSENTER_EIP, new_ki_fast_call_entry);
-}
-
-static void unhook_sysenter()
-{
-    /*
-    __asm
-    {
-        mov ecx, IA32_SYSENTER_EIP
-        mov eax, old_ki_fast_call_entry
-        xor edx, edx
-        wrmsr
-    }
-    */
-
-    __writemsr(IA32_SYSENTER_EIP, old_msr_value);
-}
-
-static void on_driver_unload(DRIVER_OBJECT *driver_object)
-{
-    KTIMER timer;
-    LARGE_INTEGER time_out;
-
-    UNREFERENCED_PARAMETER(driver_object);
-
-    unhook_sysenter();
-
-    KeInitializeTimer(&timer);
-    time_out.QuadPart = -30000000;
-    KeSetTimer(&timer, time_out, NULL);
-
-    KeWaitForSingleObject(&timer, Executive, KernelMode, FALSE, NULL);
-}
-
-NTSTATUS DriverEntry(
-    DRIVER_OBJECT *driver_object,
-    UNICODE_STRING *registry_path)
-{
-    UNREFERENCED_PARAMETER(registry_path);
-
-    driver_object->DriverUnload = on_driver_unload;
-    hook_sysenter();
-    return STATUS_SUCCESS;
-}
-- 
cgit v1.2.3