KiSystemCall32

VOID __fastcall KiSystemCall32(UINT64 a1, UINT64 a2, UINT64 a3, UINT64 a4){
  unsigned __int64 v4; 
  unsigned __int64 v5; 
  unsigned __int64 v6; 
  _M128A v7; 
  _M128A v8; 
  _M128A v9; 
  _M128A v10; 
  _M128A v11; 
  _M128A v12; 
  _KTRAP_FRAME *__shifted(_KTRAP_FRAME,0x80) TrapFrame; 
  _ETHREAD *CurrentThread; 
  unsigned __int8 v15; 
  char v16; 
  ULONG64 v17; 
  __int64 v18; 
  bool v19; 
  CHAR v20; 
  void *retaddr; 
  __swapgs();
  __writegsqword(0x10u, (unsigned __int64)&retaddr);
  __swapgs();
  _mm_lfence();
  TrapFrame = KeGetTrapFrame();
  ADJ(TrapFrame)->ExceptionActive = 1;
  ADJ(TrapFrame)->Rax = v4;
  ADJ(TrapFrame)->Rcx = a1;
  ADJ(TrapFrame)->Rdx = a2;
  ADJ(TrapFrame)->R8 = a3;
  ADJ(TrapFrame)->R9 = a4;
  ADJ(TrapFrame)->R10 = v5;
  ADJ(TrapFrame)->R11 = v6;
  if( (ADJ(TrapFrame)->SegCs & 1) != 0 )
  {
    if( (KiKvaShadow & 1) == 0 )
      __swapgs();
    _mm_lfence();
    CurrentThread = (_ETHREAD *)KeGetCurrentThread();
    __writegsqword(0x270u, *(_QWORD *)(*((_QWORD *)CurrentThread + 68) + 2528i64));
    __writegsbyte(0x851u, *((_BYTE *)KeGetPcr() + 2128));
    __writegsbyte(0x852u, *((_BYTE *)KeGetPcr() + 632));
    v15 = *((_BYTE *)KeGetPcr() + 635);
    if( *((_BYTE *)KeGetPcr() + 634) != v15 )
    {
      __writegsbyte(0x27Au, v15);
      __writemsr(0x48u, v15);
    }
    v16 = *((_BYTE *)KeGetPcr() + 632);
    if( (v16 & 8) != 0 )
    {
      __writemsr(0x49u, 1ui64);
      v16 = *((_BYTE *)KeGetPcr() + 632);
    }
    if( (v16 & 2) != 0 )
      __flush_rsb();
    _mm_lfence();
    __writegsbyte(0x853u, 0);
    if( *((char *)CurrentThread + 3) < 0 )
    {
      v17 = __readmsr(0xC0000102);
      if( v17 >= MmUserProbeAddress )
        v17 = MmUserProbeAddress;
      if( *((_QWORD *)CurrentThread + 30) != v17 )
      {
        v18 = *((_QWORD *)CurrentThread + 62);
        *((_DWORD *)CurrentThread + 29) |= 0x100u;
        --*((_WORD *)CurrentThread + 243);
        *(_QWORD *)(v18 + 128) = v17;
      }
    }
    v19 = (*((_BYTE *)CurrentThread + 3) & 3) == 0;
    LOWORD(ADJ(TrapFrame)->Dr7) = 0;
    if( !v19 )
      KiSaveDebugRegisterState();
  }
  else
  {
    _mm_lfence();
    if( (*((_BYTE *)KeGetPcr() + 632) & 1) != 0 )
      __writemsr(0x48u, *((unsigned __int8 *)KeGetPcr() + 634));
    else
      _mm_lfence();
  }
  ADJ(TrapFrame)->MxCsr = _mm_getcsr();
  _mm_setcsr(*((_DWORD *)KeGetPcr() + 96));
  ADJ(TrapFrame)->Xmm0 = v7;
  ADJ(TrapFrame)->Xmm1 = v8;
  ADJ(TrapFrame)->Xmm2 = v9;
  ADJ(TrapFrame)->Xmm3 = v10;
  ADJ(TrapFrame)->Xmm4 = v11;
  ADJ(TrapFrame)->Xmm5 = v12;
  if( (_BYTE)KeSmapEnabled && (ADJ(TrapFrame)->SegCs & 1) != 0 )
    __stac();
  ADJ(TrapFrame)->Rip -= 2i64;
  HIDWORD(ADJ(TrapFrame)->Rip) = 0;
  _enable();
  KiExceptionDispatch(3221225501i64, 0i64, (VOID *)ADJ(TrapFrame)->Rip, a4, v20);
}

Referenced by: