Retrieves the context (set of registers) of the specified thread.
ThreadHandle
- a handle to a thread grantingTHREAD_GET_CONTEXT
access.ThreadContext
- a pointer to aCONTEXT
structure that receives the state of registers. Note: make sure to initialize theContextFlags
field of the structure with the bit mask defining which portion of the context to query.
RtlCopyContext
RtlGetExtendedContextLength
NtSetContextThread
NtOpenThread
NtQueryInformationThread
NtSetInformationThread