NtRaiseException
NTSTATUS __stdcall NtRaiseException(_EXCEPTION_RECORD *ExceptionRecord, _CONTEXT *ContextRecord, UINT8 FirstChance){
__int64 v3;
NTSTATUS result;
INT64 v5;
INT64 v6;
INT64 v7;
_ETHREAD *CurrentThread;
_ETHREAD *v9;
_KTHREAD *v10;
INT64 v11;
INT64 v12;
unsigned __int8 v13;
unsigned __int8 v14;
_BYTE v17[312];
void *retaddr;
__int16 v19;
int v20;
void *v21;
__int16 v22;
CHAR v23;
*(_QWORD *)(v3 + 80) = *(_QWORD *)(v3 + 232);
result = KiRaiseException(
ExceptionRecord,
ContextRecord,
(_KEXCEPTION_FRAME *)v17,
(_KTRAP_FRAME *)(v3 - 128),
FirstChance);
if( !result )
{
if( (*(_BYTE *)(v3 + 240) & 1) == 0 )
{
CurrentThread = (_ETHREAD *)KeGetCurrentThread();
v5 = *(_QWORD *)(v3 + 184);
*((_QWORD *)CurrentThread + 18) = v5;
LOBYTE(v5) = *(_BYTE *)(v3 - 88);
*((_BYTE *)CurrentThread + 562) = v5;
}
_disable();
if( (*(_BYTE *)(v3 + 240) & 1) == 0 )
{
_mm_setcsr(*(_DWORD *)(v3 - 84));
__iretq(retaddr, v19, v20, v21, v22);
}
if( (_BYTE)KeSmapEnabled )
__stac();
while( (*((_BYTE *)KeGetCurrentThread() + 194) & 3) != 0 )
{
__writecr8(1ui64);
_enable();
KiInitiateUserApc((_KTRAP_FRAME *)1);
_disable();
__writecr8(0i64);
}
if( (*((_BYTE *)KeGetPcr() + 638) & 2) != 0 )
KiUpdateStibpPairing(0i64);
v9 = (_ETHREAD *)KeGetCurrentThread();
if( (*(_DWORD *)v9 & 0x8000000) != 0 )
KiRestoreSetContextState((INT64)v9, v5, v6, v7, v17[32]);
v10 = (_ETHREAD *)KeGetCurrentThread();
if( (*(_DWORD *)v10 & 0x40010000) != 0 )
{
if( (*((_BYTE *)v10 + 2) & 1) != 0 )
{
KiCopyCounters((_KTHREAD *)v10);
v10 = (_ETHREAD *)KeGetCurrentThread();
}
if( (*((_BYTE *)v10 + 3) & 0x40) != 0 )
KiUmsExit(1);
}
_mm_setcsr(*(_DWORD *)(v3 - 84));
if( *(_WORD *)(v3 + 128) )
KiRestoreDebugRegisterState();
v11 = *(_QWORD *)(v3 - 48);
v12 = *(_QWORD *)(v3 - 56);
__writegsbyte(0x853u, 0);
v13 = *((_BYTE *)KeGetPcr() + 637);
if( *((_BYTE *)KeGetPcr() + 634) != v13 )
{
__writegsbyte(0x27Au, v13);
__writemsr(0x48u, v13);
}
v14 = _bittestandreset16(MK_FP(__GS__, 632i64), 2u);
if( v14 )
__writemsr(0x49u, 1ui64);
v14 = _bittestandreset16(MK_FP(__GS__, 632i64), 5u);
if( v14 )
__flush_rsb();
if( (KiKvaShadow & 1) == 0 )
{
__swapgs();
__iretq(retaddr, v19, v20, v21, v22);
}
KiKernelExit(*(_QWORD *)(v3 - 72), *(_QWORD *)(v3 - 64), v12, v11, v23);
}
return result;
}Referenced by:
No references.