SmKmVirtualLockContextIncreaseWsMin
NTSTATUS __fastcall SmKmVirtualLockContextIncreaseWsMin(VOID *Lock, INT64 a2, UINT64 r8_0){
_ETHREAD *CurrentThread;
int v7;
unsigned __int64 v8;
UINT64 v9;
UINT64 v10;
int v11;
unsigned __int64 v12;
_ETHREAD *v13;
unsigned int SessionId;
unsigned __int8 v15;
int v16;
_KLOCK_ENTRY *v17;
bool v18;
__int64 v19;
__int64 v20;
UINT64 *MaximumWorkingSetSize;
UINT64 HardEnforcementFlags;
UINT64 MinimumWorkingSetSize;
UINT64 v25;
UINT64 PrivateWorkingSetSize;
UINT64 WorkingSetSize;
UINT64 PeakWorkingSetSize;
UINT8 IncreaseOccurred;
int v30;
UINT64 a3;
CurrentThread = (_ETHREAD *)KeGetCurrentThread();
MinimumWorkingSetSize = 0i64;
v25 = 0i64;
--CurrentThread->Tcb.KernelApcDisable;
ExAcquirePushLockExclusiveEx((_EX_PUSH_LOCK *)Lock, 0i64);
if( r8_0 >= *((_QWORD *)Lock + 2) )
{
do
{
PeakWorkingSetSize = 0i64;
WorkingSetSize = 0i64;
LODWORD(HardEnforcementFlags) = 0;
PrivateWorkingSetSize = 0i64;
v7 = MmQueryWorkingSetInformation(
&PeakWorkingSetSize,
&WorkingSetSize,
&PrivateWorkingSetSize,
&MinimumWorkingSetSize,
&v25,
&HardEnforcementFlags);
if( v7 < 0 )
break;
v8 = (a2 + 0x3FFFFF) & 0xFFFFFFFFFFC00000ui64;
v9 = v8 + MinimumWorkingSetSize;
if( v8 + MinimumWorkingSetSize <= MinimumWorkingSetSize )
{
v7 = -1073741675;
break;
}
v10 = v25;
MinimumWorkingSetSize += v8;
if( v9 > v25 )
v10 = v9;
IncreaseOccurred = 0;
v25 = v10;
LODWORD(MaximumWorkingSetSize) = 0;
MmAdjustWorkingSetSizeEx(v9, v10, WorkingSetTypeUser, 1u, (UINT64)MaximumWorkingSetSize, &IncreaseOccurred);
v7 = v11;
if( v11 >= 0 )
{
v12 = *((_QWORD *)Lock + 2);
if( v12 + v8 > v12 )
*((_QWORD *)Lock + 2) = v12 + v8;
v7 = 0;
break;
}
}
while( v11 == -1073741748 );
}
else
{
v7 = 1075380276;
}
if( (_InterlockedExchangeAdd64((volatile signed __int64 *)Lock, 0xFFFFFFFFFFFFFFFFui64) & 6) == 2 )
ExfTryToWakePushLock((_EX_PUSH_LOCK *)Lock);
LODWORD(a3) = 0;
v13 = (_ETHREAD *)KeGetCurrentThread();
if( MiGetSystemRegionType((UINT64)Lock) == 1 )
SessionId = MmGetSessionIdEx(v13->Tcb.ApcState.Process);
else
SessionId = -1;
--v13->Tcb.SpecialApcDisable;
v15 = ++v13->Tcb.AbAllocationRegionCount;
v16 = ((char)v13->Tcb.AbEntrySummary | (char)v13->Tcb.AbOrphanedEntrySummary) ^ 0x3F;
while( 1 )
{
v18 = !_BitScanReverse((unsigned int *)&v19, v16);
v30 = v19;
if( v18 )
goto LABEL_26;
v17 = &v13->Tcb.LockEntries[v19];
v16 &= ~(1 << v19);
if( (v17->AcquiredByte & 1) != 0
&& (v17->LockState.$E8276A2CF8B819ED32D1B6FEB35D730A::_bf_0 & 1) == 0
&& (v17->LockState.$E8276A2CF8B819ED32D1B6FEB35D730A::_bf_0 & 0x7FFFFFFFFFFFFFFCi64) == ((unsigned __int64)Lock & 0x7FFFFFFFFFFFFFFCi64)
&& v17->LockState.SessionId == SessionId )
{
v17->AcquiredByte &= ~1u;
if( v17->LockState.$E8276A2CF8B819ED32D1B6FEB35D730A::_bf_0 )
break;
}
}
if( !v17 )
{
LABEL_26:
if( (*(&v13->Tcb.MiscFlags + 1) & 0x10000) == 0 )
KeBugCheckEx(0x162u, v13, Lock, (PVOID)SessionId, 0i64);
goto LABEL_33;
}
v17->CrossThreadReleasableAndBusyByte |= 2u;
if( v17->LockState.$E8276A2CF8B819ED32D1B6FEB35D730A::_bf_0 < 0 )
KiAbEntryRemoveFromTree(v17);
LODWORD(a3) = v17->BoostBitmap.AllFields & 0x1FFFF;
v17->BoostBitmap.AllFields &= 0xFFFE0000;
v17->ThreadLocalFlags &= ~1u;
v17->LockState.$E8276A2CF8B819ED32D1B6FEB35D730A::_bf_0 = 0i64;
v20 = v17 - v13->Tcb.LockEntries;
if( v15 == 1 )
v13->Tcb.AbEntrySummary |= 1 << v20;
else
_InterlockedOr8((volatile signed __int8 *)&v13->Tcb.AbOrphanedEntrySummary, 1 << v20);
LABEL_33:
--v13->Tcb.AbAllocationRegionCount;
KiAbThreadRemoveBoosts(&v13->Tcb, Lock, &a3);
v18 = v13->Tcb.SpecialApcDisable++ == -1;
if( v18 && ($F25F8C4BA33AF922A5F1AF68CD89DDDF *)v13->Tcb.ApcState.ApcListHead[0].Flink != &v13->Tcb.152 )
KiCheckForKernelApcDelivery();
KeLeaveCriticalRegion();
return v7;
}Referenced by:
SmKmVirtualLockCtxLockMemory