13.02.2017 Views

Talos Vulndev

Harnessing%20Intel%20Processor%20Trace%20on%20Windows%20for%20Vulnerability%20Discovery%20-%20rjohnson

Harnessing%20Intel%20Processor%20Trace%20on%20Windows%20for%20Vulnerability%20Discovery%20-%20rjohnson

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

INTEL_PT_CAPABILITIES ptCap = { 0 };<br />

int cpuid_ctx[4] = { 0 };// EAX, EBX, ECX, EDX<br />

// Processor support for Intel Processor Trace is indicated by<br />

// CPUID.(EAX=07H,ECX=0H):EBX[bit 25] = 1.<br />

__cpuidex(cpuid_ctx, 0x07, 0);<br />

if (!(cpuid_ctx[1] & (1

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!