INT64 __fastcall KiRestoreThreadIptState(INT64 a1){ if( (*(_DWORD *)(a1 + 592) & 0x100i64) != 0 ) return KiRestoreIptState((UINT64 *)(*(_QWORD *)(a1 + 96) + (unsigned int)KeXStateLength)); else return KiInitIptState(); }