среда, 14 марта 2012 г.

New SYSTEMINFOCLASSes on w8 consumer preview

Names I got here
  • 7D - SystemSessionBigPoolInformation. Length >= 0xC
  • 7E - SystemBootGraphicsInformation. Length == 0x20
  • 7F - SystemScrubPhysicalMemoryInformation
  • 80 - SystemBadPageInformation. Variable length, can be zero
  • 81 - SystemProcessorProfileControlArea
  • 82 - SystemCombinePhysicalMemoryInformation
  • 83 - SystemEntropyInterruptTimingCallback
  • 84 - SystemConsoleInformation
  • 85 - SystemPlatformBinaryInformation. Checks SeTcbPrivilege
  • 86 - SystemThrottleNotificationInformation
  • 87 - SystemHypervisorProcessorCountInformation. Length >=8
  • 88 - SystemDeviceDataInformation. Length == 0x1C
  • 89 - SystemDeviceDataEnumerationInformation. Length == 0x1C
  • 8A - SystemMemoryTopologyInformation. Variable length, can be zero
  • 8B - SystemMemoryChannelInformation. Variable length, can be zero
  • 8C - SystemBootLogoInformation. Length >=8
  • 8D - SystemProcessorPerformanceInformationEx
  • 8E - SystemTimeZoneCurrentSetting. Length >0x20. Copy ExpTimeZoneCurrentSetting to usermode buffer
  • 8F - SystemSecureBootPolicyInformation. Checks SeTcbPrivilege, length >= 0x14
  • 90 - SystemPageFileInformationEx
  • 91 - SystemSecureBootInformation. Checks SeTcbPrivilege, length == 2, copy some bits from SecureBootPolicyBlobHeader to usermode buffer 
  • 92 - SystemEntropyInterruptTimingRawInformation
  • 93 - SystemPortableWorkspaceEfiLauncherInformation. Call ExpQueryPortableWorkspaceEfiLauncherInformation, variable length

Комментариев нет:

Отправить комментарий