NTSTATUS __stdcall NtTestAlert(){ return KeTestAlertThread(KeGetCurrentThread()->PreviousMode) != 0 ? 0x101 : 0; }