moon-driver-utils 0.1.0

Windows Kernel Utils
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34

use core::arch::asm;

use wdk_sys::{
    ntddk::{KeLowerIrql, KfRaiseIrql},
    DISPATCH_LEVEL, KIRQL,
};

pub fn wpoff() -> KIRQL {
    unsafe {
        let irql = KfRaiseIrql(DISPATCH_LEVEL as _);
        asm! {
            "push rax",
            "mov rax,cr0",
            "and rax,0xfffffffffffeffff",
            "mov cr0,rax",
            "pop rax",

            "cli",
        };
        irql
    }
}

pub fn wpon(irql: KIRQL) {
    unsafe {
        asm! {
            "mov rax,cr0",
            "or rax,0x10000",
            "sti",
            "mov cr0,rax",
        };
        KeLowerIrql(irql);
    }
}