KiSystemServiceShadow

VOID __stdcall KiSystemServiceShadow(INT64 a1, UINT64 a2){
  unsigned __int64 v2; 
  _KIDTENTRY64 *v5; 
  __int64 v6; 
  _KIDTENTRY64 v7; 
  _KIDTENTRY64 v8; 

  if( (v7.OffsetLow & 1) != 0 )
  {
    __swapgs();
    _mm_lfence();
    if( !_bittest(MK_FP(__GS__, 36888i64), 1u) )
      __writecr3((unsigned __int64)&v6);
    __writegsqword(0x10u, v2);
    v5 = KeGetPcr()->IdtBase + 1056;
    v8 = v5[-1];
    v7 = v5[-2];
    v6 = *(&v5[-3].Alignment + 1);
    __writegsqword(0x10u, 0i64);
    KiSystemService(a1, a2);
  }
  else
  {
    _mm_lfence();
    KiSystemService(a1, a2);
  }
}

Referenced by:

No references.