KiLeaveGuardedRegionUnsafe
void __fastcall KiLeaveGuardedRegionUnsafe(__int64 a1){
if( (*(_WORD *)(a1 + 486))++ == 0xFFFF && *(_QWORD *)(a1 + 152) != a1 + 152 )
KiCheckForKernelApcDelivery();
}Referenced by:
CreateMiniNtBootKey
EtwTracePageFault
EtwpCoverageSamplerPageFault
EtwpDisableKernelTrace
ExReleaseCacheAwarePushLockSharedEx
ExSaAllocate
ExSaFree
ExShareAddressSpaceWithDevice
ExSvmBeginDeviceReset
ExSvmFinalizeDeviceReset
ExpGetNextCallback
ExpSvmDereferenceDevice
ExpUnlockCallbackListExclusive
ExpWorkerInitialization
IoRegisterIoTracking
IoUnregisterIoTracking
IopProcessIoTracking
KeAbPostReleaseEx
KeRestoreExtendedAndSupervisorState
KeSaveExtendedAndSupervisorState
KeSynchronizeUmsThread
KiBlockAndActivateUmsThread
KiDispatchException
KiExecuteDpc
KiParkUmsThread
KiSchedulerApc
KiSwapToUmsThread
KiSwapToUmsThreadContinue
MI_UNLOCK_RELOCATIONS_EXCLUSIVE
MiAddViewsForSection
MiAllocateFromSubAllocatedRegion
MiAllocatePartitionId
MiCaptureRetpolineImportInfo
MiChargeSegmentCommit
MiClearPartitionPageBitMap
MiCommitExistingVad
MiCommitPageTableRangesForVad
MiComputeNodeMemory
MiContractWsSwapPageFileWorker
MiCreateHardwareEnclave
MiCreatePagingFile
MiCreatePagingFileMap
MiCreatePerSessionProtos
MiCreatePrototypePtes
MiDecommitHardwareEnclavePages
MiDeleteAllHardwareEnclaves
MiDeleteEnclavePages
MiDeleteHotPatchRecord
MiDeleteImageHotPatchState
MiDeletePagablePteRange
MiDeletePartialVad
MiDeletePartitionResources
MiDeleteVad
MiDeprioritizeVad
MiDereferenceExtendInfo
MiDereferencePerSessionProtos
MiDereferenceSessionFinal
MiExpandPtes
MiFindHotPatchRecord
MiFindProcessImageHotPatchRecord
MiFinishCreateSection
MiFinishHardFault
MiFinishHoldingDirtyFaults
MiFlushAllHintedStorePages
MiFreePartitionId
MiFreePhysicalPageChain
MiFreePhysicalPages
MiFreeRetpolineImportInfo
MiFreeUnusedPfnPages
MiGatherPagefilePages
MiGetChannelInformation
MiGetHotPatchEntry
MiHotPatchImage
MiIncrementAweMapCount
MiInitializeMirroring
MiInitializePagedPoolEvents
MiInitializePartition
MiInitializeSessionGlobals
MiInsertChildVads
MiInsertHotPatchRecord
MiInsertInSystemSpace
MiInsertPageFileInList
MiInsertPartitionPages
MiInsertSharedCommitNode
MiIsExtentDangling
MiIssueHardFault
MiLoadHotPatchForUserSid
MiLockAddressSpaceToo
MiLogHotPatchRundown
MiMapViewOfDataSection
MiMappedPageWriter
MiMarkHugePfnBad
MiMarkHugePfnGood
MiMarkSystemVaAllocated
MiModifiedPageWriter
MiObtainReferencedSecureVad
MiObtainReferencedVadEx
MiObtainRelocationBits
MiObtainSessionVa
MiObtainSystemCacheView
MiPerformImageHotPatch
MiPrivateFixup
MiProcessTransitionHeatBatch
MiProcessWsInSwapRanges
MiQueryLoadedPatches
MiQueryProcessActivePatches
MiReleaseKernelCfgLock
MiReleaseProcessReferenceToSessionDataPage
MiReleaseSessionVa
MiRelocateImage
MiRelocateImagePfn
MiRemoveBadPages
MiRemoveFromSystemSpace
MiRemovePlaceholderVad
MiReturnImageBase
MiSectionDelete
MiSelectOverflowDllBase
MiSelectRelocationStartHint
MiSessionCreateInternal
MiSetPagesModified
MiSetProtectionOnSection
MiShutdownSystem
MiSplitPrivatePage
MiSplitReducedCommitClonePage
MiStoreWriteModifiedPages
MiTrimAllSystemPagableMemory
MiTrimSharedPageFromViews
MiTrimUnusedPageFileRegionsWorker
MiUnloadHotPatchForUserSid
MiUnlockAwePagesExclusive
MiUnlockAweVadsExclusive
MiUnlockAweVadsShared
MiUnlockControlAreaFileObjectShared
MiUnlockControlAreaSectionExtend
MiUnlockDriverMappings
MiUnlockDynamicMemoryExclusive
MiUnlockImageExtentsExclusive
MiUnlockLoaderEntry
MiUnlockPartitionSystemThreads
MiUnlockVadShared
MiUpControlAreaRefs
MiUpdateImagePfnImportRelocations
MiWalkEntireImage
MiZeroAllPageFiles
MiZeroPage
MmAcquireSessionPoolRundown
MmCheckProcessShadow
MmCommitSessionMappedView
MmCreateShadowMapping
MmDeleteShadowMapping
MmDuplicateMemory
MmExtendSection
MmGetPageFileForCrashDump
MmLinkJobProcess
MmManagePartitionNodeInformation
MmOutSwapVirtualAddresses
MmOutSwapWorkingSet
MmPostHotPatchDbgModuleMessages
MmPrefetchForCacheManager
MmResourcesAvailable
MmSetHardFaultBehavior
MmSetPfnListInfo
MmWaitForCacheManagerPrefetch
NtCreateTimer
NtSetInformationJobObject
ObCheckRefTraceProcess
ObCreateObjectTypeEx
ObDereferenceDeviceMap
ObEnableEtwReferenceTrace
ObIsDosDeviceLocallyMapped
ObQueryDeviceMapInformation
ObQueryRefTraceInformation
ObRegisterCallbacks
ObSetCurrentProcessDeviceMap
ObUnRegisterCallbacks
ObfDereferenceDeviceMap
ObpCreateSymbolicLinkName
ObpCreateTypeArray
ObpDeleteSymbolicLinkName
ObpDeregisterObject
ObpFreeObject
ObpFreeWorkItemBlock
ObpGetShadowDirectory
ObpIncrementHandleCountEx
ObpInsertCallbackByAltitude
ObpLookupObjectName
ObpPushRefDerefInfo
ObpReferenceDeviceMap
ObpRegisterObject
ObpSetDeviceMap
ObpStartRuntimeStackTrace
ObpStopRuntimeStackTrace
PopFxActivateComponent
PpmCheckCustomRun
PpmReleaseLock
PpmTryAcquireLock
PsCallEnclave
PsLookupThreadByThreadId
PsPicoWalkUserStack
PsRevertToUserPagePriorityThread
PsSetCurrentThreadPrefetching
PsSetSystemPagePriorityThread
PspApplyTimerDelayProcess
PspApplyWorkingSetLimitsToProcess
PspClearProcessThreadCidRefs
PspGetContextThreadInternal
PspGetMemoryPartitionFromJobList
PspInitializeThunkContext
PspRundownUmsThreadForApcDelivery
PspSetContextThreadInternal
PspSetQuotaLimits
PspUmsUnInitThread
PspUnlockJobAssignment
PspUnlockJobChain
PspUnlockJobListExclusive
PspUnlockJobListShared
PspUnlockJobMemoryLimitsExclusive
PspUnlockJobMemoryLimitsShared
PspUnlockJobsAndProcessExclusive
PspUnlockProcessListExclusive
PspUnlockProcessListShared
PspUnlockQuotaExpansion
RtlCSparseBitmapLeaveLockingRegion
RtlInsertDynamicFunctionTable
RtlRemoveDynamicFunctionTable
RtlpCSparseBitmapUnlock
RtlpHpAcquireReleaseLockExclusive
RtlpHpFixedVsAllocate
RtlpHpFixedVsFree
RtlpHpHeapExtendContext
RtlpHpLargeAlloc
RtlpHpLargeAllocSetExtraPresent
RtlpHpLargeAllocSize
RtlpHpLargeFree
RtlpHpLfhBucketAddSubsegment
RtlpHpLfhBucketGetSubsegment
RtlpHpLfhBucketUpdateAffinityMapping
RtlpHpLfhContextCompact
RtlpHpLfhOwnerCompact
RtlpHpLfhSlotAllocate
RtlpHpLfhSubsegmentCreate
RtlpHpLfhSubsegmentDecommitPages
RtlpHpLfhSubsegmentFreeBlock
RtlpHpLfhSubsegmentIncBlockCounts
RtlpHpReleaseQueuedLockExclusive
RtlpHpSegContextCompact
RtlpHpSegMgrCommitComplete
RtlpHpSegMgrCommitInitiate
RtlpHpSegMgrVaCtxAlloc
RtlpHpSegMgrVaCtxFree
RtlpHpSegMgrVaCtxInsert
RtlpHpSegPageRangeAllocate
RtlpHpSegPageRangeCoalesce
RtlpHpSegPageRangeShrink
RtlpHpVaMgrAlloc
RtlpHpVaMgrCtxFree
RtlpHpVsChunkSplit
RtlpHpVsSubsegmentCommitPages
RtlpLookupUserFunctionTable
SMKM_STORE::SmStCleanup
SMKM_STORE::SmStDirectReadIssue
SMKM_STORE::SmStHelperSendCommand
SMKM_STORE::SmStInSwapStore
SMKM_STORE::SmStMapVirtualRegion
SMKM_STORE::SmStOutSwapStore
SMKM_STORE::SmStPrioritizeRegionsStore
SMKM_STORE::SmStTrimWsStore
SMKM_STORE::SmStTrimWsStoreBatch
SMKM_STORE::SmStUnmapVirtualRegion
SMKM_STORE::SmStWorker
SMKM_STORE_MGR::SmFeAddInitiate
SMKM_STORE_MGR::SmFeEmpty
SMKM_STORE_MGR::SmFeEvictComplete
SMKM_STORE_MGR::SmFeEvictInitiate
SMKM_STORE_MGR::SmFeReadInitiate
SMKM_STORE_MGR::SmFeSetEvictFailed
SMKM_STORE_MGR::SmFeStoreDelete
SMKM_STORE_MGR::SmFeStoreEvictKeys
ST_STORE::StDmHandleDecompressionFailure
ST_STORE::StDmPageRemove
ST_STORE::StDmSinglePageCopy
ST_STORE::StDmpSinglePageAdd
StLockTryAcquireExclusive
UNLOCK_ADDRESS_SPACE_SHARED_UNORDERED
UNLOCK_ADDRESS_SPACE_UNORDERED
WbAddHeapExecutedBlockToCache
WbAddHeapExecutedBlockToLRU
WbAddWarbirdEncryptionSegment
WbAllocateSlots
WbAllocateUserMemory
WbDecryptEncryptionSegment
WbFreeMemoryBlockRegion
WbGetHeapExecutedBlock
WbGetInitializedEncryptionSegment
WbGetWarbirdEncryptionSegment
WbGetWarbirdProcess
WbGetWarbirdThread
WbHeapExecutionUnloadModule
WbInPlaceEncryptionUnloadModule
WbMoveHeapExecutedBlockToBackOfLRU
WbReEncryptEncryptionSegment
WbReleaseLeastRecentlyUsedHeapExecutedBlocks
WbRemoveWarbirdProcess
WbSetTrapFrame
WbSetWowTrapFrame
sub_14065DA88