KiDoubleFaultAbortShadow
VOID __fastcall __noreturn KiDoubleFaultAbortShadow(
INT64 a1,
INT64 a2,
INT64 a3,
INT64 a4,
INT64 a5,
INT64 a6,
INT64 a7,
INT64 a8,
INT64 a9){
unsigned __int64 v9;
unsigned __int64 v10;
INT64 v14;
unsigned __int64 retaddr;
__readmsr(0xC0000101);
__writemsr(0xC0000101, retaddr);
v9 = __readcr3();
v10 = *((_QWORD *)KeGetPcr() + 4608);
if( v9 != v10 && !_bittest(MK_FP(__GS__, 36888i64), 1u) )
__writecr3(v10);
KiDoubleFaultAbort(v14, a2, a3, a4);
}Referenced by:
No references.