RtlCaptureContext

VOID *__stdcall RtlCaptureContext(PCONTEXT ContextRecord){
  unsigned __int64 v1; 
  unsigned __int64 v2; 
  unsigned __int64 v3; 
  unsigned __int64 v4; 
  unsigned __int64 v5; 
  unsigned __int64 v6; 
  unsigned __int64 v7; 
  unsigned __int64 v8; 
  unsigned __int64 v9; 
  unsigned __int64 v10; 
  unsigned __int64 v11; 
  unsigned __int64 v12; 
  unsigned __int64 v13; 
  unsigned __int64 v14; 
  _M128A v15; 
  _M128A v16; 
  _M128A v17; 
  _M128A v18; 
  _M128A v19; 
  _M128A v20; 
  _M128A v21; 
  _M128A v22; 
  _M128A v23; 
  _M128A v24; 
  _M128A v25; 
  _M128A v26; 
  _M128A v27; 
  _M128A v28; 
  _M128A v29; 
  _M128A v30; 
  VOID *result; 
  unsigned int v32; 
  unsigned __int64 retaddr; 
  char v34; 

  ContextRecord->_Rax = v1;
  ContextRecord->_Rcx = (unsigned __int64)ContextRecord;
  ContextRecord->_Rdx = v2;
  ContextRecord->_R8 = v7;
  ContextRecord->_R9 = v8;
  ContextRecord->_R10 = v9;
  ContextRecord->_R11 = v10;
  ContextRecord->FltSave.XmmRegisters[0] = v15;
  ContextRecord->FltSave.XmmRegisters[1] = v16;
  ContextRecord->FltSave.XmmRegisters[2] = v17;
  ContextRecord->FltSave.XmmRegisters[3] = v18;
  ContextRecord->FltSave.XmmRegisters[4] = v19;
  ContextRecord->FltSave.XmmRegisters[5] = v20;
  ContextRecord->SegCs = __CS__;
  ContextRecord->SegDs = __DS__;
  ContextRecord->SegEs = __ES__;
  ContextRecord->SegSs = __SS__;
  ContextRecord->SegFs = __FS__;
  ContextRecord->SegGs = __GS__;
  ContextRecord->_Rbx = v3;
  ContextRecord->_Rbp = v4;
  ContextRecord->_Rsi = v6;
  ContextRecord->_Rdi = v5;
  ContextRecord->_R12 = v11;
  ContextRecord->_R13 = v12;
  ContextRecord->_R14 = v13;
  ContextRecord->_R15 = v14;
  *(_DWORD *)((char *)&ContextRecord->Header[0].Low + 2) = 0;
  ContextRecord->FltSave.XmmRegisters[6] = v21;
  ContextRecord->FltSave.XmmRegisters[7] = v22;
  ContextRecord->FltSave.XmmRegisters[8] = v23;
  ContextRecord->FltSave.XmmRegisters[9] = v24;
  ContextRecord->FltSave.XmmRegisters[10] = v25;
  ContextRecord->FltSave.XmmRegisters[11] = v26;
  ContextRecord->FltSave.XmmRegisters[12] = v27;
  ContextRecord->FltSave.XmmRegisters[13] = v28;
  ContextRecord->FltSave.XmmRegisters[14] = v29;
  ContextRecord->FltSave.XmmRegisters[15] = v30;
  ContextRecord->FltSave._MxCsr = _mm_getcsr();
  ContextRecord->_MxCsr = _mm_getcsr();
  ContextRecord->_Rsp = (unsigned __int64)&v34;
  ContextRecord->_Rip = retaddr;
  result = (VOID *)v32;
  ContextRecord->EFlags = v32;
  ContextRecord->ContextFlags = 1048591;
  return result;
}

Referenced by: