NtCallEnclave

void __fastcall NtCallEnclave(UINT64 a1, INT64 a2, NTSTATUS a3, INT64 *a4, CHAR a5){
  __int64 v5; 
  __int64 v6; 
  INT64 v7; 
  INT64 v8; 
  INT64 v9; 
  _ETHREAD *CurrentThread; 
  _ETHREAD *v11; 
  INT64 v12; 
  INT64 v13; 
  unsigned __int8 BpbUserSpecCtrl; 
  unsigned __int8 v15; 
  CHAR v18; 
  void *retaddr; 
  __int16 v20; 
  int v21; 
  void *v22; 
  __int16 v23; 

  *(_DWORD *)(v5 - 72) = 0;
  *(_DWORD *)(v5 - 64) = 0;
  *(_DWORD *)(v5 - 56) = 0;
  *(_DWORD *)(v5 - 48) = 0;
  *(_DWORD *)(v5 - 40) = 0;
  *(_DWORD *)(v5 - 32) = 0;
  *(_OWORD *)(v5 - 16) = 0i64;
  *(_OWORD *)v5 = 0i64;
  *(_OWORD *)(v5 + 16) = 0i64;
  *(_OWORD *)(v5 + 32) = 0i64;
  *(_OWORD *)(v5 + 48) = 0i64;
  *(_OWORD *)(v5 + 64) = 0i64;
  LODWORD(v6) = PsCallEnclave(a1, a2, a3, a4);
  *(_QWORD *)(v5 - 80) = v6;
  _disable();
  if( (*(_BYTE *)(v5 + 240) & 1) == 0 )
  {
    _mm_setcsr(*(_DWORD *)(v5 - 84));
    __iretq(retaddr, v20, v21, v22, v23);
  }
  if( (_BYTE)KeSmapEnabled )
    __stac();
  while( (KeGetCurrentThread()->ApcState.UserApcPendingAll & 3) != 0 )
  {
    __writecr8(1ui64);
    _enable();
    KiInitiateUserApc((_KTRAP_FRAME *)1);
    _disable();
    __writecr8(0i64);
  }
  if( (*((_BYTE *)&KeGetPcr()->Prcb.2 + 14) & 2) != 0 )
    KiUpdateStibpPairing(0i64);
  CurrentThread = (_ETHREAD *)KeGetCurrentThread();
  if( (*(_DWORD *)CurrentThread->Tcb.gap0 & 0x8000000) != 0 )
    KiRestoreSetContextState((INT64)CurrentThread, v7, v8, v9, v18);
  v11 = (_ETHREAD *)KeGetCurrentThread();
  if( (*(_DWORD *)v11->Tcb.gap0 & 0x40010000) != 0 )
  {
    if( (v11->Tcb.gap0[2] & 1) != 0 )
    {
      KiCopyCounters(&v11->Tcb);
      v11 = (_ETHREAD *)KeGetCurrentThread();
    }
    if( (v11->Tcb.gap0[3] & 0x40) != 0 )
      KiUmsExit(1);
  }
  _mm_setcsr(*(_DWORD *)(v5 - 84));
  if( *(_WORD *)(v5 + 128) )
    KiRestoreDebugRegisterState();
  v12 = *(_QWORD *)(v5 - 48);
  v13 = *(_QWORD *)(v5 - 56);
  __writegsbyte(0x853u, 0);
  BpbUserSpecCtrl = KeGetPcr()->Prcb.BpbUserSpecCtrl;
  if( KeGetPcr()->Prcb.BpbCurrentSpecCtrl != BpbUserSpecCtrl )
  {
    __writegsbyte(0x27Au, BpbUserSpecCtrl);
    __writemsr(0x48u, BpbUserSpecCtrl);
  }
  v15 = _bittestandreset16(MK_FP(__GS__, 632i64), 2u);
  if( v15 )
    __writemsr(0x49u, 1ui64);
  v15 = _bittestandreset16(MK_FP(__GS__, 632i64), 5u);
  if( v15 )
    __flush_rsb();
  if( (KiKvaShadow & 1) == 0 )
  {
    __swapgs();
    __iretq(retaddr, v20, v21, v22, v23);
  }
  KiKernelExit(*(_QWORD *)(v5 - 72), *(_QWORD *)(v5 - 64), v13, v12, a5);
}

Referenced by: