KiCheckForAtlThunk
NTSTATUS __stdcall KiCheckForAtlThunk(INT64 a1){
__int64 v2;
if( *(_BYTE *)(a1 + 58) )
{
v2 = *(_QWORD *)(a1 + 32);
if( (*(_BYTE *)(v2 + 32) & 8) != 0
&& *(_QWORD *)(v2 + 40) == *(_QWORD *)a1
&& (unsigned int)KiEmulateAtlThunk(
(UINT64 *)(*(_QWORD *)(a1 + 24) + 248i64),
(UINT64 *)(*(_QWORD *)(a1 + 24) + 152i64),
(UINT64 *)(*(_QWORD *)(a1 + 24) + 120i64),
(UINT64 *)(*(_QWORD *)(a1 + 24) + 128i64),
(UINT64 *)(*(_QWORD *)(a1 + 24) + 136i64)) )
{
*(_BYTE *)(a1 + 96) = 1;
}
}
return 0;
}Referenced by:
KiPreprocessFault