34 ThreadContext->Rip = (
ULONG64)ThreadStartAddress;
35 ThreadContext->Rsp = (
ULONG64)StackBase - 6 *
sizeof(
PVOID);
38 ThreadContext->Rsp &= ~15;
39 ThreadContext->Rsp -= 8;
45 ThreadContext->Rcx = (
ULONG64)ThreadStartParam;
48 if ((
LONG64)ThreadStartAddress < 0)
ULONG(NTAPI * PTHREAD_START_ROUTINE)(PVOID Parameter)
return STATUS_NOT_IMPLEMENTED
NTSTATUS(* NTAPI)(IN PFILE_FULL_EA_INFORMATION EaBuffer, IN ULONG EaLength, OUT PULONG ErrorOffset)
_In_opt_ PVOID _In_opt_ PVOID SystemArgument1
_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE ApcRoutine
_In_opt_ PVOID _In_opt_ PVOID _In_opt_ PVOID SystemArgument2
VOID NTAPI RtlInitializeContext(_Reserved_ HANDLE ProcessHandle, _Out_ PCONTEXT ThreadContext, _In_ PVOID ThreadStartParam OPTIONAL, _In_ PTHREAD_START_ROUTINE ThreadStartAddress, _In_ PINITIAL_TEB StackBase)
#define RtlZeroMemory(Destination, Length)
VOID(NTAPI * PKNORMAL_ROUTINE)(IN PVOID NormalContext OPTIONAL, IN PVOID SystemArgument1 OPTIONAL, IN PVOID SystemArgument2 OPTIONAL)
NTSTATUS NTAPI RtlQueueApcWow64Thread(_In_ HANDLE ThreadHandle, _In_ PKNORMAL_ROUTINE ApcRoutine, _In_opt_ PVOID NormalContext, _In_opt_ PVOID SystemArgument1, _In_opt_ PVOID SystemArgument2)
_In_ HANDLE ProcessHandle
#define EFLAGS_INTERRUPT_MASK
PULONG MinorVersion OPTIONAL