KiIpiInterrupt

VOID __stdcall KiIpiInterrupt(UINT64 a1, UINT64 a2, UINT64 a3, UINT64 a4, CHAR a5){
  unsigned __int64 v5; 
  unsigned __int64 v6; 
  unsigned __int64 v7; 
  _M128A v8; 
  _M128A v9; 
  _M128A v10; 
  _M128A v11; 
  _M128A v12; 
  _M128A v13; 
  _KTRAP_FRAME *__shifted(_KTRAP_FRAME,0x80) TrapFrame; 
  _ETHREAD *CurrentThread; 
  unsigned __int8 BpbKernelSpecCtrl; 
  unsigned __int8 BpbState; 
  bool v18; 
  INT64 v19; 
  INT64 v20; 
  INT64 v21; 
  struct _KPRCB *CurrentPrcb; 
  unsigned __int64 v23; 
  UINT64 v24; 
  _ETHREAD *v25; 
  _ETHREAD *v26; 
  INT64 R9; 
  INT64 R8; 
  unsigned __int8 BpbUserSpecCtrl; 
  unsigned __int8 v30; 
  CHAR v33; 
  void *retaddr; 
  __int16 v35; 
  int v36; 
  void *v37; 
  __int16 v38; 

  TrapFrame = KeGetTrapFrame();
  ADJ(TrapFrame)->ExceptionActive = 0;
  ADJ(TrapFrame)->_Rax = v5;
  ADJ(TrapFrame)->_Rcx = a1;
  ADJ(TrapFrame)->_Rdx = a2;
  ADJ(TrapFrame)->_R8 = a3;
  ADJ(TrapFrame)->_R9 = a4;
  ADJ(TrapFrame)->_R10 = v6;
  ADJ(TrapFrame)->_R11 = v7;
  if( (ADJ(TrapFrame)->SegCs & 1) != 0 )
  {
    if( (KiKvaShadow & 1) == 0 )
      __swapgs();
    _mm_lfence();
    CurrentThread = (_ETHREAD *)KeGetCurrentThread();
    __writegsqword(0x270u, CurrentThread->Tcb.Process->SecurityDomain);
    __writegsbyte(0x851u, KeGetPcr()->Prcb.BpbRetpolineExitSpecCtrl);
    __writegsbyte(0x852u, KeGetPcr()->Prcb.BpbState);
    BpbKernelSpecCtrl = KeGetPcr()->Prcb.BpbKernelSpecCtrl;
    if( KeGetPcr()->Prcb.BpbCurrentSpecCtrl != BpbKernelSpecCtrl )
    {
      __writegsbyte(0x27Au, BpbKernelSpecCtrl);
      __writemsr(0x48u, BpbKernelSpecCtrl);
    }
    BpbState = KeGetPcr()->Prcb.BpbState;
    if( (BpbState & 8) != 0 )
    {
      __writemsr(0x49u, 1ui64);
      BpbState = KeGetPcr()->Prcb.BpbState;
    }
    if( (BpbState & 2) != 0 )
      __flush_rsb();
    _mm_lfence();
    __writegsbyte(0x853u, 0);
    v18 = (CurrentThread->Tcb.gap0[3] & 3) == 0;
    LOWORD(ADJ(TrapFrame)->Dr7) = 0;
    if( !v18 )
      KiSaveDebugRegisterState();
  }
  else
  {
    _mm_lfence();
    if( (KeGetPcr()->Prcb.BpbState & 1) != 0 )
      __writemsr(0x48u, KeGetPcr()->Prcb.BpbCurrentSpecCtrl);
    else
      _mm_lfence();
  }
  ADJ(TrapFrame)->_MxCsr = _mm_getcsr();
  _mm_setcsr(KeGetPcr()->Prcb._MxCsr);
  ADJ(TrapFrame)->_Xmm0 = v8;
  ADJ(TrapFrame)->_Xmm1 = v9;
  ADJ(TrapFrame)->_Xmm2 = v10;
  ADJ(TrapFrame)->_Xmm3 = v11;
  ADJ(TrapFrame)->_Xmm4 = v12;
  ADJ(TrapFrame)->_Xmm5 = v13;
  if( KeGetPcr()->Prcb.DeepSleep )
    KeWakeProcessor();
  if( (unsigned __int64)&ExpInterlockedPopEntrySListResume < ADJ(TrapFrame)->_Rip
    && (unsigned __int64)&ExpInterlockedPopEntrySListEnd >= ADJ(TrapFrame)->_Rip )
  {
    KiCheckForSListAddress(ADJ(TrapFrame));
  }
  __incgsdword(0x8000u);
  KiIpiInterruptSubDispatch();
  HalPerformEndOfInterrupt(0i64);
  CurrentPrcb = KeGetCurrentPrcb();
  if( CurrentPrcb->NestingLevel <= 1u )
  {
    v23 = __rdtsc();
    v19 = (unsigned __int64)HIDWORD(v23) << 32;
    v24 = (v19 | (unsigned int)v23) - CurrentPrcb->StartCycles;
    CurrentPrcb->CycleTime += v24;
    CurrentPrcb->StartCycles += v24;
    v20 = v24;
    if( (CurrentPrcb->CurrentThread->Tcb.gap0[2] & 0x72) != 0 )
    {
      KiBeginThreadAccountingPeriod(CurrentPrcb, 0i64, v24);
      CurrentPrcb = KeGetCurrentPrcb();
      ++CurrentPrcb->NestingLevel;
    }
    LOBYTE(v19) = CurrentPrcb->InterruptRequest;
    CurrentPrcb->InterruptRequest = 0;
    if( !CurrentPrcb->IdleHalt )
    {
      if( (_BYTE)v19 )
      {
        if( ADJ(TrapFrame)->PreviousIrql < 2u )
        {
          CurrentPrcb->NestingLevel = 0;
          KiDpcInterruptBypass();
          goto LABEL_29;
        }
        HalRequestSoftwareInterrupt(2ui64);
        CurrentPrcb = KeGetCurrentPrcb();
      }
    }
  }
  --CurrentPrcb->NestingLevel;
LABEL_29:
  __writecr8(ADJ(TrapFrame)->PreviousIrql);
  if( (ADJ(TrapFrame)->SegCs & 1) == 0 )
  {
    _mm_setcsr(ADJ(TrapFrame)->_MxCsr);
    __iretq(retaddr, v35, v36, v37, v38);
  }
  if( (_BYTE)KeSmapEnabled )
    __stac();
  while( (KeGetCurrentThread()->ApcState.UserApcPendingAll & 3) != 0 )
  {
    __writecr8(1ui64);
    _enable();
    KiInitiateUserApc((_KTRAP_FRAME *)1);
    _disable();
    __writecr8(0i64);
  }
  if( (*((_BYTE *)&KeGetPcr()->Prcb.2 + 14) & 2) != 0 )
    KiUpdateStibpPairing(0i64);
  v25 = (_ETHREAD *)KeGetCurrentThread();
  if( (*(_DWORD *)v25->Tcb.gap0 & 0x8000000) != 0 )
    KiRestoreSetContextState((INT64)v25, v19, v20, v21, v33);
  v26 = (_ETHREAD *)KeGetCurrentThread();
  if( (*(_DWORD *)v26->Tcb.gap0 & 0x40010000) != 0 && (v26->Tcb.gap0[2] & 1) != 0 )
    KiCopyCounters(&v26->Tcb);
  _mm_setcsr(ADJ(TrapFrame)->_MxCsr);
  if( LOWORD(ADJ(TrapFrame)->Dr7) )
    KiRestoreDebugRegisterState();
  R9 = ADJ(TrapFrame)->_R9;
  R8 = ADJ(TrapFrame)->_R8;
  __writegsbyte(0x853u, 0);
  BpbUserSpecCtrl = KeGetPcr()->Prcb.BpbUserSpecCtrl;
  if( KeGetPcr()->Prcb.BpbCurrentSpecCtrl != BpbUserSpecCtrl )
  {
    __writegsbyte(0x27Au, BpbUserSpecCtrl);
    __writemsr(0x48u, BpbUserSpecCtrl);
  }
  v30 = _bittestandreset16(MK_FP(__GS__, 632i64), 2u);
  if( v30 )
    __writemsr(0x49u, 1ui64);
  v30 = _bittestandreset16(MK_FP(__GS__, 632i64), 5u);
  if( v30 )
    __flush_rsb();
  if( (KiKvaShadow & 1) == 0 )
  {
    __swapgs();
    __iretq(retaddr, v35, v36, v37, v38);
  }
  KiKernelExit(ADJ(TrapFrame)->_Rcx, ADJ(TrapFrame)->_Rdx, R8, R9, a5);
}

Referenced by: