KiVirtualizationException

INT64 KiVirtualizationException(void){
  unsigned __int64 v0; 
  unsigned __int64 v1; 
  unsigned __int64 v2; 
  unsigned __int64 v3; 
  unsigned __int64 v4; 
  unsigned __int64 v5; 
  unsigned __int64 v6; 
  _M128A v7; 
  _M128A v8; 
  _M128A v9; 
  _M128A v10; 
  _M128A v11; 
  _M128A v12; 
  _KTRAP_FRAME *__shifted(_KTRAP_FRAME,0x80) TrapFrame; 
  _ETHREAD *CurrentThread; 
  unsigned __int8 v15; 
  char v16; 
  bool v17; 
  __int64 v18; 
  int CurrentIrql; 
  __int64 v20; 
  UINT64 v21; 
  INT64 v22; 
  INT64 v23; 
  INT64 v24; 
  _ETHREAD *v25; 
  _KTHREAD *v26; 
  INT64 R9; 
  INT64 R8; 
  unsigned __int8 v29; 
  unsigned __int8 v30; 
  INT64 result; 
  CHAR NewIrql; 
  void *retaddr; 
  __int16 v36; 
  int v37; 
  void *v38; 
  __int16 v39; 
  CHAR v40; 
  TrapFrame = KeGetTrapFrame();
  ADJ(TrapFrame)->ExceptionActive = 1;
  ADJ(TrapFrame)->Rax = v0;
  ADJ(TrapFrame)->Rcx = v2;
  ADJ(TrapFrame)->Rdx = v1;
  ADJ(TrapFrame)->R8 = v3;
  ADJ(TrapFrame)->R9 = v4;
  ADJ(TrapFrame)->R10 = v5;
  ADJ(TrapFrame)->R11 = v6;
  if( (ADJ(TrapFrame)->SegCs & 1) != 0 )
  {
    if( (KiKvaShadow & 1) == 0 )
      __swapgs();
    _mm_lfence();
    CurrentThread = (_ETHREAD *)KeGetCurrentThread();
    __writegsqword(0x270u, *(_QWORD *)(*((_QWORD *)CurrentThread + 68) + 2528i64));
    __writegsbyte(0x851u, *((_BYTE *)KeGetPcr() + 2128));
    __writegsbyte(0x852u, *((_BYTE *)KeGetPcr() + 632));
    v15 = *((_BYTE *)KeGetPcr() + 635);
    if( *((_BYTE *)KeGetPcr() + 634) != v15 )
    {
      __writegsbyte(0x27Au, v15);
      __writemsr(0x48u, v15);
    }
    v16 = *((_BYTE *)KeGetPcr() + 632);
    if( (v16 & 8) != 0 )
    {
      __writemsr(0x49u, 1ui64);
      v16 = *((_BYTE *)KeGetPcr() + 632);
    }
    if( (v16 & 2) != 0 )
      __flush_rsb();
    _mm_lfence();
    __writegsbyte(0x853u, 0);
    v17 = (*((_BYTE *)CurrentThread + 3) & 3) == 0;
    LOWORD(ADJ(TrapFrame)->Dr7) = 0;
    if( !v17 )
      KiSaveDebugRegisterState();
  }
  else
  {
    _mm_lfence();
    if( (*((_BYTE *)KeGetPcr() + 632) & 1) != 0 )
      __writemsr(0x48u, *((unsigned __int8 *)KeGetPcr() + 634));
    else
      _mm_lfence();
  }
  ADJ(TrapFrame)->MxCsr = _mm_getcsr();
  _mm_setcsr(*((_DWORD *)KeGetPcr() + 96));
  ADJ(TrapFrame)->Xmm0 = v7;
  ADJ(TrapFrame)->Xmm1 = v8;
  ADJ(TrapFrame)->Xmm2 = v9;
  ADJ(TrapFrame)->Xmm3 = v10;
  ADJ(TrapFrame)->Xmm4 = v11;
  ADJ(TrapFrame)->Xmm5 = v12;
  if( (_BYTE)KeSmapEnabled && (ADJ(TrapFrame)->SegCs & 1) != 0 )
    __stac();
  v18 = *((_QWORD *)KeGetPcr() + 4257);
  if( !v18
    || *(_DWORD *)(v18 + 68) != 1
    || (ADJ(TrapFrame)->EFlags & 0x200) == 0
    || (CurrentIrql = KeGetCurrentIrql(), LODWORD(ADJ(TrapFrame)->P5) = CurrentIrql, (char)CurrentIrql >= 2) )
  {
    KiBugCheckDispatch(0x7Fu, 0x20ui64, LOBYTE(ADJ(TrapFrame)->P5), *((_QWORD *)KeGetPcr() + 4257));
  }
  KzRaiseIrql(2u);
  _enable();
  v20 = *((_QWORD *)KeGetPcr() + 4257);
  v21 = *(_QWORD *)(v20 + 72);
  *(_DWORD *)(v20 + 68) = 0;
  KiEpfHandleNotification(v21);
  _disable();
  KzLowerIrql(ADJ(TrapFrame)->P5);
  if( (ADJ(TrapFrame)->SegCs & 1) == 0 )
  {
    _mm_setcsr(ADJ(TrapFrame)->MxCsr);
    __iretq(retaddr, v36, v37, v38, v39);
  }
  if( (_BYTE)KeSmapEnabled )
    __stac();
  while( (*((_BYTE *)KeGetCurrentThread() + 194) & 3) != 0 )
  {
    __writecr8(1ui64);
    _enable();
    KiInitiateUserApc((_KTRAP_FRAME *)1);
    _disable();
    __writecr8(0i64);
  }
  if( (*((_BYTE *)KeGetPcr() + 638) & 2) != 0 )
    KiUpdateStibpPairing(0i64);
  v25 = (_ETHREAD *)KeGetCurrentThread();
  if( (*(_DWORD *)v25 & 0x8000000) != 0 )
    KiRestoreSetContextState((INT64)v25, v22, v23, v24, NewIrql);
  v26 = (_ETHREAD *)KeGetCurrentThread();
  if( (*(_DWORD *)v26 & 0x40010000) != 0 )
  {
    if( (*((_BYTE *)v26 + 2) & 1) != 0 )
    {
      KiCopyCounters((_KTHREAD *)v26);
      v26 = (_ETHREAD *)KeGetCurrentThread();
    }
    if( (*((_BYTE *)v26 + 3) & 0x40) != 0 )
      KiUmsExit(1);
  }
  _mm_setcsr(ADJ(TrapFrame)->MxCsr);
  if( LOWORD(ADJ(TrapFrame)->Dr7) )
    KiRestoreDebugRegisterState();
  R9 = ADJ(TrapFrame)->R9;
  R8 = ADJ(TrapFrame)->R8;
  __writegsbyte(0x853u, 0);
  v29 = *((_BYTE *)KeGetPcr() + 637);
  if( *((_BYTE *)KeGetPcr() + 634) != v29 )
  {
    __writegsbyte(0x27Au, v29);
    __writemsr(0x48u, v29);
  }
  v30 = _bittestandreset16(MK_FP(__GS__, 632i64), 2u);
  if( v30 )
    __writemsr(0x49u, 1ui64);
  v30 = _bittestandreset16(MK_FP(__GS__, 632i64), 5u);
  if( v30 )
    __flush_rsb();
  if( (KiKvaShadow & 1) == 0 )
  {
    __swapgs();
    __iretq(retaddr, v36, v37, v38, v39);
  }
  KiKernelExit(ADJ(TrapFrame)->Rcx, ADJ(TrapFrame)->Rdx, R8, R9, v40);
  return result;
}

Referenced by: