1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
|
;------------------------------------------------------------------------------
;
; Copyright (c) 2006 - 2013, Intel Corporation. All rights reserved.<BR>
;
; This program and the accompanying materials
; are licensed and made available under the terms and conditions of the BSD License
; which accompanies this distribution. The full text of the license may be found at
; http://opensource.org/licenses/bsd-license.php.
;
; THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,
; WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.
;
;------------------------------------------------------------------------------
DEFAULT REL
SECTION .text
;------------------------------------------------------------------------------
; VOID
; EFIAPI
; JumpToKernel (
; VOID *KernelStart, // rcx
; VOID *KernelBootParams // rdx
; );
;------------------------------------------------------------------------------
global ASM_PFX(JumpToKernel)
ASM_PFX(JumpToKernel):
; Set up for executing kernel. BP in %esi, entry point on the stack
; (64-bit when the 'ret' will use it as 32-bit, but we're little-endian)
mov rsi, rdx
push rcx
; Jump into the compatibility mode CS
push 0x10
lea rax, [.0]
push rax
DB 0x48, 0xcb ; retfq
.0:
; Now in compatibility mode.
DB 0xb8, 0x18, 0x0, 0x0, 0x0 ; movl $0x18, %eax
DB 0x8e, 0xd8 ; movl %eax, %ds
DB 0x8e, 0xc0 ; movl %eax, %es
DB 0x8e, 0xe0 ; movl %eax, %fs
DB 0x8e, 0xe8 ; movl %eax, %gs
DB 0x8e, 0xd0 ; movl %eax, %ss
; Disable paging
DB 0xf, 0x20, 0xc0 ; movl %cr0, %eax
DB 0xf, 0xba, 0xf8, 0x1f ; btcl $31, %eax
DB 0xf, 0x22, 0xc0 ; movl %eax, %cr0
; Disable long mode in EFER
DB 0xb9, 0x80, 0x0, 0x0, 0xc0 ; movl $0x0c0000080, %ecx
DB 0xf, 0x32 ; rdmsr
DB 0xf, 0xba, 0xf8, 0x8 ; btcl $8, %eax
DB 0xf, 0x30 ; wrmsr
; Disable PAE
DB 0xf, 0x20, 0xe0 ; movl %cr4, %eax
DB 0xf, 0xba, 0xf8, 0x5 ; btcl $5, %eax
DB 0xf, 0x22, 0xe0 ; movl %eax, %cr4
DB 0x31, 0xed ; xor %ebp, %ebp
DB 0x31, 0xff ; xor %edi, %edi
DB 0x31, 0xdb ; xor %ebx, %ebx
DB 0xc3 ; ret
;------------------------------------------------------------------------------
; VOID
; EFIAPI
; JumpToUefiKernel (
; EFI_HANDLE ImageHandle, // rcx
; EFI_SYSTEM_TABLE *SystemTable, // rdx
; VOID *KernelBootParams // r8
; VOID *KernelStart, // r9
; );
;------------------------------------------------------------------------------
global ASM_PFX(JumpToUefiKernel)
ASM_PFX(JumpToUefiKernel):
mov rdi, rcx
mov rsi, rdx
mov rdx, r8
xor rax, rax
mov eax, [r8 + 0x264]
add r9, rax
add r9, 0x200
call r9
ret
|
