RtlCaptureContext

VOID __stdcall RtlCaptureContext(PCONTEXT ContextRecord){
  unsigned __int64 v1; 
  unsigned __int64 v2; 
  unsigned __int64 v3; 
  unsigned __int64 v4; 
  unsigned __int64 v5; 
  unsigned __int64 v6; 
  unsigned __int64 v7; 
  unsigned __int64 v8; 
  unsigned __int64 v9; 
  unsigned __int64 v10; 
  unsigned __int64 v11; 
  unsigned __int64 v12; 
  unsigned __int64 v13; 
  unsigned __int64 v14; 
  _M128A v15; 
  _M128A v16; 
  _M128A v17; 
  _M128A v18; 
  _M128A v19; 
  _M128A v20; 
  _M128A v21; 
  _M128A v22; 
  _M128A v23; 
  _M128A v24; 
  _M128A v25; 
  _M128A v26; 
  _M128A v27; 
  _M128A v28; 
  _M128A v29; 
  _M128A v30; 
  unsigned int v31; 
  unsigned __int64 retaddr; 
  char v33; 
  ContextRecord->Rax = v1;
  ContextRecord->Rcx = (unsigned __int64)ContextRecord;
  ContextRecord->Rdx = v2;
  ContextRecord->R8 = v7;
  ContextRecord->R9 = v8;
  ContextRecord->R10 = v9;
  ContextRecord->R11 = v10;
  ContextRecord->FltSave.XmmRegisters[0] = v15;
  ContextRecord->FltSave.XmmRegisters[1] = v16;
  ContextRecord->FltSave.XmmRegisters[2] = v17;
  ContextRecord->FltSave.XmmRegisters[3] = v18;
  ContextRecord->FltSave.XmmRegisters[4] = v19;
  ContextRecord->FltSave.XmmRegisters[5] = v20;
  ContextRecord->SegCs = __CS__;
  ContextRecord->SegDs = __DS__;
  ContextRecord->SegEs = __ES__;
  ContextRecord->SegSs = __SS__;
  ContextRecord->SegFs = __FS__;
  ContextRecord->SegGs = __GS__;
  ContextRecord->Rbx = v3;
  ContextRecord->Rbp = v4;
  ContextRecord->Rsi = v6;
  ContextRecord->Rdi = v5;
  ContextRecord->R12 = v11;
  ContextRecord->R13 = v12;
  ContextRecord->R14 = v13;
  ContextRecord->R15 = v14;
  *(_DWORD *)((char *)&ContextRecord->Header[0].Low + 2) = 0;
  ContextRecord->FltSave.XmmRegisters[6] = v21;
  ContextRecord->FltSave.XmmRegisters[7] = v22;
  ContextRecord->FltSave.XmmRegisters[8] = v23;
  ContextRecord->FltSave.XmmRegisters[9] = v24;
  ContextRecord->FltSave.XmmRegisters[10] = v25;
  ContextRecord->FltSave.XmmRegisters[11] = v26;
  ContextRecord->FltSave.XmmRegisters[12] = v27;
  ContextRecord->FltSave.XmmRegisters[13] = v28;
  ContextRecord->FltSave.XmmRegisters[14] = v29;
  ContextRecord->FltSave.XmmRegisters[15] = v30;
  ContextRecord->FltSave.MxCsr = _mm_getcsr();
  ContextRecord->MxCsr = _mm_getcsr();
  ContextRecord->Rsp = (unsigned __int64)&v33;
  ContextRecord->Rip = retaddr;
  ContextRecord->EFlags = v31;
  ContextRecord->ContextFlags = 1048591;
}

Referenced by: