NtContinueEx

void __fastcall NtContinueEx(_CONTEXT *a1, BOOL a2, __int64 a3, __int64 a4, CHAR a5){
  __int64 v5; 
  __int64 v6; 
  __int64 v7; 
  __int64 v8; 
  INT64 v9; 
  INT64 v10; 
  INT64 v11; 
  _ETHREAD *CurrentThread; 
  _ETHREAD *v13; 
  _ETHREAD *v14; 
  INT64 v15; 
  INT64 v16; 
  unsigned __int8 BpbUserSpecCtrl; 
  unsigned __int8 v18; 
  _BYTE v21[312]; 
  void *retaddr; 
  __int16 v23; 
  int v24; 
  void *v25; 
  __int16 v26; 

  v6 = *(_QWORD *)(v5 + 192);
  v7 = *(_QWORD *)(v5 + 200);
  v8 = *(_QWORD *)(v5 + 208);
  *(_QWORD *)(v5 - 80) = 0i64;
  *(_QWORD *)&v21[256] = v6;
  *(_QWORD *)&v21[264] = v7;
  *(_QWORD *)&v21[272] = v8;
  if( KiContinueEx(a1, a2, (PKEXCEPTION_FRAME)v21, (PKTRAP_FRAME)(v5 - 128)) > 0 )
  {
    CurrentThread = (_ETHREAD *)KeGetCurrentThread();
    if( (*(_BYTE *)(v5 + 240) & 1) == 0 )
    {
      v9 = *(_QWORD *)(v5 + 184);
      CurrentThread->Tcb.TrapFrame = (_KTRAP_FRAME *)v9;
      LOBYTE(v9) = *(_BYTE *)(v5 - 88);
      CurrentThread->Tcb.PreviousMode = v9;
    }
    _disable();
    if( (*(_BYTE *)(v5 + 240) & 1) == 0 )
    {
      _mm_setcsr(*(_DWORD *)(v5 - 84));
      __iretq(retaddr, v23, v24, v25, v26);
    }
    if( (_BYTE)KeSmapEnabled )
      __stac();
    while( (KeGetCurrentThread()->ApcState.UserApcPendingAll & 3) != 0 )
    {
      __writecr8(1ui64);
      _enable();
      KiInitiateUserApc((_KTRAP_FRAME *)1);
      _disable();
      __writecr8(0i64);
    }
    if( (*((_BYTE *)&KeGetPcr()->Prcb.2 + 14) & 2) != 0 )
      KiUpdateStibpPairing(0i64);
    v13 = (_ETHREAD *)KeGetCurrentThread();
    if( (*(_DWORD *)v13->Tcb.gap0 & 0x8000000) != 0 )
      KiRestoreSetContextState((INT64)v13, v9, v10, v11, v21[32]);
    v14 = (_ETHREAD *)KeGetCurrentThread();
    if( (*(_DWORD *)v14->Tcb.gap0 & 0x40010000) != 0 )
    {
      if( (v14->Tcb.gap0[2] & 1) != 0 )
      {
        KiCopyCounters(&v14->Tcb);
        v14 = (_ETHREAD *)KeGetCurrentThread();
      }
      if( (v14->Tcb.gap0[3] & 0x40) != 0 )
        KiUmsExit(1);
    }
    _mm_setcsr(*(_DWORD *)(v5 - 84));
    if( *(_WORD *)(v5 + 128) )
      KiRestoreDebugRegisterState();
    v15 = *(_QWORD *)(v5 - 48);
    v16 = *(_QWORD *)(v5 - 56);
    __writegsbyte(0x853u, 0);
    BpbUserSpecCtrl = KeGetPcr()->Prcb.BpbUserSpecCtrl;
    if( KeGetPcr()->Prcb.BpbCurrentSpecCtrl != BpbUserSpecCtrl )
    {
      __writegsbyte(0x27Au, BpbUserSpecCtrl);
      __writemsr(0x48u, BpbUserSpecCtrl);
    }
    v18 = _bittestandreset16(MK_FP(__GS__, 632i64), 2u);
    if( v18 )
      __writemsr(0x49u, 1ui64);
    v18 = _bittestandreset16(MK_FP(__GS__, 632i64), 5u);
    if( v18 )
      __flush_rsb();
    if( (KiKvaShadow & 1) == 0 )
    {
      __swapgs();
      __iretq(retaddr, v23, v24, v25, v26);
    }
    KiKernelExit(*(_QWORD *)(v5 - 72), *(_QWORD *)(v5 - 64), v16, v15, a5);
  }
}

Referenced by: