SmKmVirtualLockContextIncreaseWsMin

NTSTATUS __fastcall SmKmVirtualLockContextIncreaseWsMin(VOID *Lock, INT64 a2, UINT64 r8_0){
  _ETHREAD *CurrentThread; 
  int v7; 
  unsigned __int64 v8; 
  UINT64 v9; 
  UINT64 v10; 
  int v11; 
  unsigned __int64 v12; 
  _ETHREAD *v13; 
  unsigned int SessionId; 
  unsigned __int8 v15; 
  int v16; 
  _KLOCK_ENTRY *v17; 
  bool v18; 
  __int64 v19; 
  __int64 v20; 
  UINT64 *MaximumWorkingSetSize; 
  UINT64 HardEnforcementFlags; 
  UINT64 MinimumWorkingSetSize; 
  UINT64 v25; 
  UINT64 PrivateWorkingSetSize; 
  UINT64 WorkingSetSize; 
  UINT64 PeakWorkingSetSize; 
  UINT8 IncreaseOccurred; 
  int v30; 
  UINT64 a3; 

  CurrentThread = (_ETHREAD *)KeGetCurrentThread();
  MinimumWorkingSetSize = 0i64;
  v25 = 0i64;
  --CurrentThread->Tcb.KernelApcDisable;
  ExAcquirePushLockExclusiveEx((_EX_PUSH_LOCK *)Lock, 0i64);
  if( r8_0 >= *((_QWORD *)Lock + 2) )
  {
    do
    {
      PeakWorkingSetSize = 0i64;
      WorkingSetSize = 0i64;
      LODWORD(HardEnforcementFlags) = 0;
      PrivateWorkingSetSize = 0i64;
      v7 = MmQueryWorkingSetInformation(
             &PeakWorkingSetSize,
             &WorkingSetSize,
             &PrivateWorkingSetSize,
             &MinimumWorkingSetSize,
             &v25,
             &HardEnforcementFlags);
      if( v7 < 0 )
        break;
      v8 = (a2 + 0x3FFFFF) & 0xFFFFFFFFFFC00000ui64;
      v9 = v8 + MinimumWorkingSetSize;
      if( v8 + MinimumWorkingSetSize <= MinimumWorkingSetSize )
      {
        v7 = -1073741675;
        break;
      }
      v10 = v25;
      MinimumWorkingSetSize += v8;
      if( v9 > v25 )
        v10 = v9;
      IncreaseOccurred = 0;
      v25 = v10;
      LODWORD(MaximumWorkingSetSize) = 0;
      MmAdjustWorkingSetSizeEx(v9, v10, WorkingSetTypeUser, 1u, (UINT64)MaximumWorkingSetSize, &IncreaseOccurred);
      v7 = v11;
      if( v11 >= 0 )
      {
        v12 = *((_QWORD *)Lock + 2);
        if( v12 + v8 > v12 )
          *((_QWORD *)Lock + 2) = v12 + v8;
        v7 = 0;
        break;
      }
    }
    while( v11 == -1073741748 );
  }
  else
  {
    v7 = 1075380276;
  }
  if( (_InterlockedExchangeAdd64((volatile signed __int64 *)Lock, 0xFFFFFFFFFFFFFFFFui64) & 6) == 2 )
    ExfTryToWakePushLock((_EX_PUSH_LOCK *)Lock);
  LODWORD(a3) = 0;
  v13 = (_ETHREAD *)KeGetCurrentThread();
  if( MiGetSystemRegionType((UINT64)Lock) == 1 )
    SessionId = MmGetSessionIdEx(v13->Tcb.ApcState.Process);
  else
    SessionId = -1;
  --v13->Tcb.SpecialApcDisable;
  v15 = ++v13->Tcb.AbAllocationRegionCount;
  v16 = ((char)v13->Tcb.AbEntrySummary | (char)v13->Tcb.AbOrphanedEntrySummary) ^ 0x3F;
  while( 1 )
  {
    v18 = !_BitScanReverse((unsigned int *)&v19, v16);
    v30 = v19;
    if( v18 )
      goto LABEL_26;
    v17 = &v13->Tcb.LockEntries[v19];
    v16 &= ~(1 << v19);
    if( (v17->AcquiredByte & 1) != 0
      && (v17->LockState.$E8276A2CF8B819ED32D1B6FEB35D730A::_bf_0 & 1) == 0
      && (v17->LockState.$E8276A2CF8B819ED32D1B6FEB35D730A::_bf_0 & 0x7FFFFFFFFFFFFFFCi64) == ((unsigned __int64)Lock & 0x7FFFFFFFFFFFFFFCi64)
      && v17->LockState.SessionId == SessionId )
    {
      v17->AcquiredByte &= ~1u;
      if( v17->LockState.$E8276A2CF8B819ED32D1B6FEB35D730A::_bf_0 )
        break;
    }
  }
  if( !v17 )
  {
LABEL_26:
    if( (*(&v13->Tcb.MiscFlags + 1) & 0x10000) == 0 )
      KeBugCheckEx(0x162u, v13, Lock, (PVOID)SessionId, 0i64);
    goto LABEL_33;
  }
  v17->CrossThreadReleasableAndBusyByte |= 2u;
  if( v17->LockState.$E8276A2CF8B819ED32D1B6FEB35D730A::_bf_0 < 0 )
    KiAbEntryRemoveFromTree(v17);
  LODWORD(a3) = v17->BoostBitmap.AllFields & 0x1FFFF;
  v17->BoostBitmap.AllFields &= 0xFFFE0000;
  v17->ThreadLocalFlags &= ~1u;
  v17->LockState.$E8276A2CF8B819ED32D1B6FEB35D730A::_bf_0 = 0i64;
  v20 = v17 - v13->Tcb.LockEntries;
  if( v15 == 1 )
    v13->Tcb.AbEntrySummary |= 1 << v20;
  else
    _InterlockedOr8((volatile signed __int8 *)&v13->Tcb.AbOrphanedEntrySummary, 1 << v20);
LABEL_33:
  --v13->Tcb.AbAllocationRegionCount;
  KiAbThreadRemoveBoosts(&v13->Tcb, Lock, &a3);
  v18 = v13->Tcb.SpecialApcDisable++ == -1;
  if( v18 && ($F25F8C4BA33AF922A5F1AF68CD89DDDF *)v13->Tcb.ApcState.ApcListHead[0].Flink != &v13->Tcb.152 )
    KiCheckForKernelApcDelivery();
  KeLeaveCriticalRegion();
  return v7;
}

Referenced by:

SmKmVirtualLockCtxLockMemory