KiControlProtectionFaultShadow
VOID __fastcall KiControlProtectionFaultShadow(UINT64 a1, UINT64 a2, INT64 a3, UINT64 a4, CHAR a5){
unsigned __int64 v5;
__int64 v8;
_QWORD v9[2];
__int64 v10;
__int64 v11;
__int64 v12;
__int64 v13;
if( (v10 & 1) != 0 )
{
__swapgs();
_mm_lfence();
if( !_bittest(MK_FP(__GS__, 36888i64), 1u) )
__writecr3((unsigned __int64)v9);
__writegsqword(0x10u, v5);
v8 = *((_QWORD *)KeGetPcr() + 7) + 16896i64;
v13 = *(_QWORD *)(v8 - 8);
v12 = *(_QWORD *)(v8 - 16);
v11 = *(_QWORD *)(v8 - 24);
v10 = *(_QWORD *)(v8 - 32);
v9[1] = *(_QWORD *)(v8 - 40);
v9[0] = *(_QWORD *)(v8 - 48);
__writegsqword(0x10u, 0i64);
KiControlProtectionFault(a1, a2, a3, a4, a5);
}
else
{
_mm_lfence();
KiControlProtectionFault(a1, a2, a3, a4, a5);
}
}Referenced by:
No references.