KiApcInterrupt
VOID __fastcall KiApcInterrupt(UINT64 a1, UINT64 a2, UINT64 a3, UINT64 a4, CHAR a5){
unsigned __int64 v5;
unsigned __int64 v6;
unsigned __int64 v7;
_M128A v8;
_M128A v9;
_M128A v10;
_M128A v11;
_M128A v12;
_M128A v13;
_KTRAP_FRAME *__shifted(_KTRAP_FRAME,0x80) TrapFrame;
_ETHREAD *CurrentThread;
unsigned __int8 v16;
char v17;
bool v18;
unsigned __int8 CurrentIrql;
INT64 v20;
INT64 v21;
INT64 v22;
_ETHREAD *v23;
_KTHREAD *v24;
INT64 R9;
INT64 R8;
unsigned __int8 v27;
unsigned __int8 v28;
CHAR v31;
void *retaddr;
__int16 v33;
int v34;
void *v35;
__int16 v36;
TrapFrame = KeGetTrapFrame();
ADJ(TrapFrame)->ExceptionActive = 0;
ADJ(TrapFrame)->Rax = v5;
ADJ(TrapFrame)->Rcx = a1;
ADJ(TrapFrame)->Rdx = a2;
ADJ(TrapFrame)->R8 = a3;
ADJ(TrapFrame)->R9 = a4;
ADJ(TrapFrame)->R10 = v6;
ADJ(TrapFrame)->R11 = v7;
if( (ADJ(TrapFrame)->SegCs & 1) != 0 )
{
if( (KiKvaShadow & 1) == 0 )
__swapgs();
_mm_lfence();
CurrentThread = (_ETHREAD *)KeGetCurrentThread();
__writegsqword(0x270u, *(_QWORD *)(*((_QWORD *)CurrentThread + 68) + 2528i64));
__writegsbyte(0x851u, *((_BYTE *)KeGetPcr() + 2128));
__writegsbyte(0x852u, *((_BYTE *)KeGetPcr() + 632));
v16 = *((_BYTE *)KeGetPcr() + 635);
if( *((_BYTE *)KeGetPcr() + 634) != v16 )
{
__writegsbyte(0x27Au, v16);
__writemsr(0x48u, v16);
}
v17 = *((_BYTE *)KeGetPcr() + 632);
if( (v17 & 8) != 0 )
{
__writemsr(0x49u, 1ui64);
v17 = *((_BYTE *)KeGetPcr() + 632);
}
if( (v17 & 2) != 0 )
__flush_rsb();
_mm_lfence();
__writegsbyte(0x853u, 0);
v18 = (*((_BYTE *)CurrentThread + 3) & 3) == 0;
LOWORD(ADJ(TrapFrame)->Dr7) = 0;
if( !v18 )
KiSaveDebugRegisterState();
}
else
{
_mm_lfence();
if( (*((_BYTE *)KeGetPcr() + 632) & 1) != 0 )
__writemsr(0x48u, *((unsigned __int8 *)KeGetPcr() + 634));
else
_mm_lfence();
}
ADJ(TrapFrame)->MxCsr = _mm_getcsr();
_mm_setcsr(*((_DWORD *)KeGetPcr() + 96));
ADJ(TrapFrame)->Xmm0 = v8;
ADJ(TrapFrame)->Xmm1 = v9;
ADJ(TrapFrame)->Xmm2 = v10;
ADJ(TrapFrame)->Xmm3 = v11;
ADJ(TrapFrame)->Xmm4 = v12;
ADJ(TrapFrame)->Xmm5 = v13;
__incgsdword(0x8000u);
if( (_BYTE)KeSmapEnabled && (ADJ(TrapFrame)->SegCs & 1) != 0 )
__stac();
CurrentIrql = KeGetCurrentIrql();
__writecr8(1ui64);
ADJ(TrapFrame)->PreviousIrql = CurrentIrql;
HalPerformEndOfInterrupt(0i64);
_enable();
if( !*((_BYTE *)KeGetPcr() + 391) )
KiDeliverApc(0, 0i64, ADJ(TrapFrame));
_disable();
__writecr8(ADJ(TrapFrame)->PreviousIrql);
_disable();
if( (ADJ(TrapFrame)->SegCs & 1) == 0 )
{
_mm_setcsr(ADJ(TrapFrame)->MxCsr);
__iretq(retaddr, v33, v34, v35, v36);
}
if( (_BYTE)KeSmapEnabled )
__stac();
while( (*((_BYTE *)KeGetCurrentThread() + 194) & 3) != 0 )
{
__writecr8(1ui64);
_enable();
KiInitiateUserApc((_KTRAP_FRAME *)1);
_disable();
__writecr8(0i64);
}
if( (*((_BYTE *)KeGetPcr() + 638) & 2) != 0 )
KiUpdateStibpPairing(0i64);
v23 = (_ETHREAD *)KeGetCurrentThread();
if( (*(_DWORD *)v23 & 0x8000000) != 0 )
KiRestoreSetContextState((INT64)v23, v20, v21, v22, v31);
v24 = (_ETHREAD *)KeGetCurrentThread();
if( (*(_DWORD *)v24 & 0x40010000) != 0 )
{
if( (*((_BYTE *)v24 + 2) & 1) != 0 )
{
KiCopyCounters((_KTHREAD *)v24);
v24 = (_ETHREAD *)KeGetCurrentThread();
}
if( (*((_BYTE *)v24 + 3) & 0x40) != 0 )
KiUmsExit(1);
}
_mm_setcsr(ADJ(TrapFrame)->MxCsr);
if( LOWORD(ADJ(TrapFrame)->Dr7) )
KiRestoreDebugRegisterState();
R9 = ADJ(TrapFrame)->R9;
R8 = ADJ(TrapFrame)->R8;
__writegsbyte(0x853u, 0);
v27 = *((_BYTE *)KeGetPcr() + 637);
if( *((_BYTE *)KeGetPcr() + 634) != v27 )
{
__writegsbyte(0x27Au, v27);
__writemsr(0x48u, v27);
}
v28 = _bittestandreset16(MK_FP(__GS__, 632i64), 2u);
if( v28 )
__writemsr(0x49u, 1ui64);
v28 = _bittestandreset16(MK_FP(__GS__, 632i64), 5u);
if( v28 )
__flush_rsb();
if( (KiKvaShadow & 1) == 0 )
{
__swapgs();
__iretq(retaddr, v33, v34, v35, v36);
}
KiKernelExit(ADJ(TrapFrame)->Rcx, ADJ(TrapFrame)->Rdx, R8, R9, a5);
}Referenced by:
KiApcInterruptShadow