KiSystemService
VOID __fastcall KiSystemService(INT64 a1, UINT64 a2){
unsigned __int64 v2;
unsigned __int64 v3;
unsigned __int64 v4;
unsigned __int64 v5;
unsigned __int64 v6;
_KTRAP_FRAME *__shifted(_KTRAP_FRAME,0x80) TrapFrame;
unsigned __int8 v8;
char v9;
__int16 v10;
if( v10 != 35 )
{
if( (KiKvaShadow & 1) == 0 )
__swapgs();
_mm_lfence();
TrapFrame = KeGetTrapFrame();
ADJ(TrapFrame)->Rbx = v3;
ADJ(TrapFrame)->Rdi = v4;
ADJ(TrapFrame)->Rsi = v5;
if( (_BYTE)KeSmapEnabled && (ADJ(TrapFrame)->SegCs & 1) != 0 )
__stac();
ADJ(TrapFrame)->Rax = v2;
ADJ(TrapFrame)->Rcx = v6;
ADJ(TrapFrame)->Rdx = a2;
__writegsqword(0x270u, *(_QWORD *)(*((_QWORD *)KeGetCurrentThread() + 68) + 2528i64));
__writegsbyte(0x851u, *((_BYTE *)KeGetPcr() + 2128));
__writegsbyte(0x852u, *((_BYTE *)KeGetPcr() + 632));
v8 = *((_BYTE *)KeGetPcr() + 635);
if( *((_BYTE *)KeGetPcr() + 634) != v8 )
{
__writegsbyte(0x27Au, v8);
__writemsr(0x48u, v8);
}
v9 = *((_BYTE *)KeGetPcr() + 632);
if( (v9 & 8) != 0 )
{
__writemsr(0x49u, 1ui64);
v9 = *((_BYTE *)KeGetPcr() + 632);
}
if( (v9 & 2) != 0 )
__flush_rsb();
_mm_lfence();
__writegsbyte(0x853u, 0);
JUMPOUT(0x14040D63Ai64);
}
JUMPOUT(0x14040CF67i64);
}Referenced by:
KiSystemServiceShadow