Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- typedef struct _SYSTEM_SPECULATION_CONTROL_INFORMATION
- {
- struct
- {
- ULONG BpbEnabled : 1; // IBPB/IBRS protection enabled
- ULONG BpbDisabledSystemPolicy : 1; // PolicyOverride/PolicyOverrideMask registry setting
- ULONG BpbDisabledNoHardwareSupport : 1; // BIOS/Firmware update not installed (or does this mean AMD CPU?)
- ULONG SpecCtrlEnumerated : 1; // CPU SPEC_CTRL MSR support (IBRS)
- ULONG SpecCmdEnumerated : 1; // CPU PRED_CMD MSR support (IBPB)
- ULONG IbrsPresent : 1; // IBRS (Indirect Branch Restricted Speculation) support present (if SpecCtrlEnumerated)
- ULONG StibpPresent : 1; // STIBP (Single Thread Indirect Branch Predictors) support present (if SpecCtrlEnumerated)
- ULONG SmepPresent : 1; // SMEP (Supervisor-Mode Execution Prevention) support present (Ivy Bridge and later)
- ULONG Reserved : 24; //
- } SpeculationControlFlags;
- } SYSTEM_SPECULATION_CONTROL_INFORMATION, *PSYSTEM_SPECULATION_CONTROL_INFORMATION;
- Notes:
- IbrsPresent and StibpPresent: BIOS/Firmware update installed
- #define SystemKernelVaShadowInformation (SYSTEM_INFORMATION_CLASS)196
- typedef struct _SYSTEM_KERNEL_VA_SHADOW_INFORMATION
- {
- struct
- {
- ULONG KvaShadowEnabled : 1; // Kernel VA shadowing enabled
- ULONG KvaShadowUserGlobal : 1; // Kernel VA shadowing on user pages marked global
- ULONG KvaShadowPcid : 1; // CPU has PCID support (Westmere and later)
- ULONG KvaShadowInvpcid : 1; // CPU has NVPCID support -- (Haswell and later)
- ULONG Reserved : 28; //
- } KvaShadowFlags;
- } SYSTEM_KERNEL_VA_SHADOW_INFORMATION, *PSYSTEM_KERNEL_VA_SHADOW_INFORMATION;
Add Comment
Please, Sign In to add comment