SKINIT

if not efer >> 12 & 1:           # without SVM on, only where SVM-Lock
    r = cpuid_leaf(0x8000000A, 0)  # (EDX bit 2) or the device
    lock = r[3] >> 2 & 1         # exclusion vector of SKINIT
    r = cpuid_leaf(0x80000001, 0)  # (ECX bit 12) is there
    dev = r[2] >> 12 & 1
    if not lock and not dev:
        fault(UD)
if CPL > 0:
    fault(GP, 0)
if intercepted(0x86):
    vm_exit(0x86)                # in a guest: to its hypervisor
a = slb.read() & 0xFFFF0000      # the secure loader block, 64 KB
init_state()                     # as an INIT signal leaves it, CR0
                                 # with PE set: protected mode, no
                                 # paging
set_rflags(0)                    # bit 1 alone
cs = 0x08                        # flat 32-bit code
ss = 0x10                        # flat 32-bit stack
efer = 0
eax = a
edx = cpuid_leaf(1, 0)[0]        # family, model and stepping
esp = a + 0x10000                # the SL's stack, above the SLB
ebx = ecx = ebp = esi = edi = 0
r8 = r9 = r10 = r11 = 0
r12 = r13 = r14 = r15 = 0
msr[VM_CR] = msr[VM_CR] | 7      # DPD, R_INIT and DIS_A20M set
gif = 0
set_cpl(0)
n = phys_read(a + 2, 16)         # the SL's length; the SLB's 64 KB
                                 # kept from devices, and its first
                                 # n bytes hashed into the TPM
rip = a + phys_read(a, 16)       # the SL's entry point