A snippet of code which is a KiFastSystemCall hook I wrote that hooks all user-mode APIs by replacing the SYSENTER MSR. It works also on multi-processor systems and should be easy to extend into a fully functional library if you want to.
[培训]科锐软件逆向54期预科班、正式班开始火爆招生报名啦!!!