KeUnstackDetachProcess
VOID *__stdcall KeUnstackDetachProcess(PRKAPC_STATE ApcState){
VOID *result;
result = ApcState->Process;
if( result != (VOID *)1 )
{
if( !result )
ApcState = &KeGetCurrentThread()->SavedApcState;
KiDetachProcess(ApcState, 0i64);
}
return result;
}Referenced by:
CmpStartCLFSLog
DbgkpPostFakeThreadMessages
EtwpEnableGuid
KiLogUserCetSetContextIpValidationFailureWorker
MiAllocateUserPhysicalPages
MiDeleteAllHardwareEnclaves
MmQueryVirtualMemory
NtFreeUserPhysicalPages
NtGetWriteWatch
NtInitializeEnclave
NtLoadEnclaveData
NtLockVirtualMemory
NtProtectVirtualMemory
NtPssCaptureVaSpaceBulk
NtQueryInformationProcess
NtResetWriteWatch
NtSetInformationProcess
NtSetInformationVirtualMemory
NtUnlockVirtualMemory
PfSnAppLaunchScenarioControl
PsCreateMinimalProcess
PspAllocateProcess
PspApplyWorkingSetLimits
PspProcessDynamicEnforcedAddressRanges
PspQueryQuotaLimits
PspSetQuotaLimits