Jacek Caban : ntdll: Use syscall frame for volatile registers in x64_64 NtGetContextThread.