KiSetupForInstrumentationReturn

VOID __stdcall KiSetupForInstrumentationReturn(_KTRAP_FRAME *TrapFrame, UINT64 InstrumentSyscallFrame){
  void *InstrumentationCallback; 

  InstrumentationCallback = KeGetCurrentThread()->ApcState.Process->Pcb.InstrumentationCallback;
  if( InstrumentationCallback )
  {
    if( TrapFrame->SegCs == 51 )
    {
      TrapFrame->_R10 = TrapFrame->_Rip;
      TrapFrame->_Rip = (unsigned __int64)InstrumentationCallback;
    }
  }
}

Referenced by: