KiGeneralProtectionFault
VOID __stdcall KiGeneralProtectionFault(){
_ETHREAD *CurrentThread;
unsigned __int8 BpbKernelSpecCtrl;
unsigned __int8 BpbState;
ULONG64 v3;
_QWORD *Object;
CHAR v5;
void *retaddr;
VOID *v7;
char v8;
__int16 v9;
if( (v8 & 1) != 0 )
{
if( (KiKvaShadow & 1) == 0 )
__swapgs();
_mm_lfence();
CurrentThread = (_ETHREAD *)KeGetCurrentThread();
__writegsqword(0x270u, CurrentThread->Tcb.Process->SecurityDomain);
__writegsbyte(0x851u, KeGetPcr()->Prcb.BpbRetpolineExitSpecCtrl);
__writegsbyte(0x852u, KeGetPcr()->Prcb.BpbState);
BpbKernelSpecCtrl = KeGetPcr()->Prcb.BpbKernelSpecCtrl;
if( KeGetPcr()->Prcb.BpbCurrentSpecCtrl != BpbKernelSpecCtrl )
{
__writegsbyte(0x27Au, BpbKernelSpecCtrl);
__writemsr(0x48u, BpbKernelSpecCtrl);
}
BpbState = KeGetPcr()->Prcb.BpbState;
if( (BpbState & 8) != 0 )
{
__writemsr(0x49u, 1ui64);
BpbState = KeGetPcr()->Prcb.BpbState;
}
if( (BpbState & 2) != 0 )
__flush_rsb();
_mm_lfence();
__writegsbyte(0x853u, 0);
if( (char)CurrentThread->Tcb.gap0[3] < 0 )
{
v3 = __readmsr(0xC0000102);
if( v3 >= MmUserProbeAddress )
v3 = MmUserProbeAddress;
if( CurrentThread->Tcb.Teb != (void *)v3 )
{
Object = CurrentThread->Tcb.WaitBlock[3].Object;
CurrentThread->Tcb._bf_0 |= 0x100u;
--CurrentThread->Tcb.SpecialApcDisable;
Object[16] = v3;
}
}
if( (CurrentThread->Tcb.gap0[3] & 3) != 0 )
KiSaveDebugRegisterState();
}
else
{
_mm_lfence();
if( (KeGetPcr()->Prcb.BpbState & 1) != 0 )
__writemsr(0x48u, KeGetPcr()->Prcb.BpbCurrentSpecCtrl);
else
_mm_lfence();
}
_mm_getcsr();
_mm_setcsr(KeGetPcr()->Prcb._MxCsr);
if( (_BYTE)KeSmapEnabled && (v8 & 1) != 0 )
__stac();
if( (v9 & 0x200) != 0 )
_enable();
KiExceptionDispatch(268435457i64, 2i64, v7, (unsigned __int16)retaddr, v5);
}Referenced by:
KiGeneralProtectionFaultShadow