KiBreakpointTrap
INT64 __fastcall KiBreakpointTrap(INT64 a1){
_ETHREAD *CurrentThread;
unsigned __int8 v2;
char v3;
ULONG64 v4;
__int64 v5;
INT64 result;
CHAR v7;
char *retaddr;
char v9;
__int16 v10;
if( (v9 & 1) != 0 )
{
if( (KiKvaShadow & 1) == 0 )
__swapgs();
_mm_lfence();
CurrentThread = (_ETHREAD *)KeGetCurrentThread();
__writegsqword(0x270u, *(_QWORD *)(*((_QWORD *)CurrentThread + 68) + 2528i64));
__writegsbyte(0x851u, *((_BYTE *)KeGetPcr() + 2128));
__writegsbyte(0x852u, *((_BYTE *)KeGetPcr() + 632));
v2 = *((_BYTE *)KeGetPcr() + 635);
if( *((_BYTE *)KeGetPcr() + 634) != v2 )
{
__writegsbyte(0x27Au, v2);
__writemsr(0x48u, v2);
}
v3 = *((_BYTE *)KeGetPcr() + 632);
if( (v3 & 8) != 0 )
{
__writemsr(0x49u, 1ui64);
v3 = *((_BYTE *)KeGetPcr() + 632);
}
if( (v3 & 2) != 0 )
__flush_rsb();
_mm_lfence();
__writegsbyte(0x853u, 0);
if( *((char *)CurrentThread + 3) < 0 )
{
v4 = __readmsr(0xC0000102);
if( v4 >= MmUserProbeAddress )
v4 = MmUserProbeAddress;
if( *((_QWORD *)CurrentThread + 30) != v4 )
{
v5 = *((_QWORD *)CurrentThread + 62);
*((_DWORD *)CurrentThread + 29) |= 0x100u;
--*((_WORD *)CurrentThread + 243);
*(_QWORD *)(v5 + 128) = v4;
}
}
if( (*((_BYTE *)CurrentThread + 3) & 3) != 0 )
KiSaveDebugRegisterState();
}
else
{
_mm_lfence();
if( (*((_BYTE *)KeGetPcr() + 632) & 1) != 0 )
__writemsr(0x48u, *((unsigned __int8 *)KeGetPcr() + 634));
else
_mm_lfence();
}
_mm_getcsr();
_mm_setcsr(*((_DWORD *)KeGetPcr() + 96));
if( (_BYTE)KeSmapEnabled && (v9 & 1) != 0 )
__stac();
if( (v10 & 0x200) != 0 )
_enable();
KiExceptionDispatch(2147483651i64, 1i64, retaddr - 1, 0i64, v7);
return result;
}Referenced by:
KiBreakpointTrapShadow