PspFreeCurrentThreadUserShadowStack
NTSTATUS __stdcall PspFreeCurrentThreadUserShadowStack(){
NTSTATUS result;
INT64 v1;
__int128 MemoryInformation[3];
INT64 v3;
UINT64 v4;
memset(MemoryInformation, 0, sizeof(MemoryInformation));
result = ZwQueryVirtualMemory(-1, (PVOID)__readmsr(0x6A7u), MemoryRegionInformation, MemoryInformation, 48, 0i64);
if( result >= 0 )
{
v3 = 0i64;
LODWORD(v1) = 0x40000000;
v4 = *(_QWORD *)&MemoryInformation[0];
return MmFreeVirtualMemory(-1i64, &v4, &v3, 0x8000i64, 0, v1);
}
return result;
}Referenced by:
PspExitThread