KeUpdatePrimaryThreadContext
NTSTATUS __stdcall KeUpdatePrimaryThreadContext(INT64 a1, _CONTEXT *a2){
__int64 v2;
if( (a2->ContextFlags & 0x100010) == 1048592 )
{
v2 = **(_QWORD **)(a1 + 496);
RtlpCopyLegacyContext(1, (_CONTEXT *)(v2 + 16), 0x100010ui64, a2);
if( (*(_DWORD *)(v2 + 128) & 0x355i64) != 0 )
_interlockedbittestandset((volatile signed __int32 *)(v2 + 1264), 4u);
else
_interlockedbittestandreset((volatile signed __int32 *)(v2 + 1264), 4u);
}
return 0;
}Referenced by:
PspGetSetContextInternal