KiSegmentNotPresentFault
VOID __stdcall __noreturn KiSegmentNotPresentFault(INT64 SecurityDomain, UINT64 Spare18){
_ETHREAD *CurrentThread;
unsigned __int8 v3;
char v4;
ULONG64 v5;
__int64 v6;
__int64 v7;
ULONG_PTR v8;
ULONG_PTR v9;
CHAR v10;
void *retaddr;
VOID *v12;
char v13;
__int16 v14;
if( (v13 & 1) != 0 )
{
if( (KiKvaShadow & 1) == 0 )
__swapgs();
_mm_lfence();
CurrentThread = (_ETHREAD *)KeGetCurrentThread();
SecurityDomain = *(_QWORD *)(*((_QWORD *)CurrentThread + 68) + 2528i64);
__writegsqword(0x270u, SecurityDomain);
__writegsbyte(0x851u, *((_BYTE *)KeGetPcr() + 2128));
LOBYTE(SecurityDomain) = *((_BYTE *)KeGetPcr() + 632);
__writegsbyte(0x852u, SecurityDomain);
v3 = *((_BYTE *)KeGetPcr() + 635);
if( *((_BYTE *)KeGetPcr() + 634) != v3 )
{
__writegsbyte(0x27Au, v3);
SecurityDomain = 72i64;
__writemsr(0x48u, v3);
}
v4 = *((_BYTE *)KeGetPcr() + 632);
if( (v4 & 8) != 0 )
{
SecurityDomain = 73i64;
__writemsr(0x49u, 1ui64);
v4 = *((_BYTE *)KeGetPcr() + 632);
}
if( (v4 & 2) != 0 )
__flush_rsb();
_mm_lfence();
__writegsbyte(0x853u, 0);
if( *((char *)CurrentThread + 3) < 0 )
{
SecurityDomain = 3221225730i64;
v5 = __readmsr(0xC0000102);
if( v5 >= MmUserProbeAddress )
v5 = MmUserProbeAddress;
if( *((_QWORD *)CurrentThread + 30) != v5 )
{
v6 = *((_QWORD *)CurrentThread + 62);
*((_DWORD *)CurrentThread + 29) |= 0x100u;
--*((_WORD *)CurrentThread + 243);
*(_QWORD *)(v6 + 128) = v5;
}
}
if( (*((_BYTE *)CurrentThread + 3) & 3) != 0 )
KiSaveDebugRegisterState();
}
else
{
_mm_lfence();
if( (*((_BYTE *)KeGetPcr() + 632) & 1) != 0 )
{
SecurityDomain = 72i64;
__writemsr(0x48u, *((unsigned __int8 *)KeGetPcr() + 634));
}
else
{
_mm_lfence();
}
}
_mm_getcsr();
_mm_setcsr(*((_DWORD *)KeGetPcr() + 96));
if( (_BYTE)KeSmapEnabled && (v13 & 1) != 0 )
__stac();
LOBYTE(v7) = (_BYTE)retaddr;
if( ((unsigned __int8)retaddr & 4) != 0 )
SecurityDomain = _InterlockedExchange64(MK_FP(__GS__, 35304i64), 0i64);
if( (v14 & 0x200) != 0 )
_enable();
if( (v7 & 4) != 0 )
KiExceptionDispatch(268435462i64, 2i64, v12, SecurityDomain, v10);
if( (v13 & 1) != 0 )
KiExceptionDispatch(268435463i64, 2i64, v12, (unsigned __int16)retaddr | 3u, v10);
v8 = (unsigned int)retaddr;
v9 = __readcr0();
KiBugCheckDispatch(0x7Fu, 0xBui64, v9, v8);
}Referenced by:
KiSegmentNotPresentFaultShadow