KiForceSymbolReferences
INT64 __stdcall KiForceSymbolReferences(){
_ETHREAD *CurrentThread;
__int64 v1;
__int64 v2;
__int64 v3;
char v4;
int SessionId;
bool v6;
signed __int8 v7;
unsigned __int8 CurrentIrql;
INT64 result;
unsigned int v10;
INT64 SpinLock;
__int64 Lock;
Lock = 0i64;
if( *((_DWORD *)KeGetPcr() + 105) )
goto LABEL_22;
v10 = 0;
CurrentThread = (_ETHREAD *)KeGetCurrentThread();
--*((_WORD *)CurrentThread + 243);
if( ++*((_BYTE *)CurrentThread + 794) != 1 )
{
v1 = 0i64;
goto LABEL_4;
}
LOBYTE(v2) = *((_BYTE *)CurrentThread + 792);
if( !(_BYTE)v2 )
{
if( !*((_BYTE *)CurrentThread + 870) )
{
v1 = 0i64;
goto LABEL_4;
}
v3 = *((unsigned __int8 *)CurrentThread + 870);
*((_BYTE *)CurrentThread + 870) = 0;
LOBYTE(v2) = v3 | *((_BYTE *)CurrentThread + 792);
}
v4 = v2;
_BitScanForward((unsigned int *)&v2, (unsigned __int8)v2);
*((_BYTE *)CurrentThread + 792) = v4 & ~(1 << v2);
v1 = *((_QWORD *)CurrentThread + 100) + 96 * v2;
if( !v1 )
{
LABEL_4:
_interlockedbittestandset((volatile signed __int32 *)CurrentThread + 30, 0x10u);
goto LABEL_15;
}
if( (unsigned __int64)&Lock >= 0xFFFF800000000000ui64
&& *((_BYTE *)&antNameB + (((unsigned __int64)&Lock >> 39) & 0x1FF) - 256) == 1 )
{
SessionId = MmGetSessionIdEx(*((_QWORD *)CurrentThread + 23));
}
else
{
SessionId = -1;
}
*(_DWORD *)(v1 + 40) = SessionId;
*(_QWORD *)(v1 + 32) = &Lock;
LABEL_15:
--*((_BYTE *)CurrentThread + 794);
KiAbThreadRemoveBoosts((ULONG_PTR)CurrentThread, (__int64)&Lock, &v10);
v6 = (*((_WORD *)CurrentThread + 243))++ == 0xFFFF;
if( v6 && *((_ETHREAD **)CurrentThread + 19) != (_ETHREAD *)((char *)CurrentThread + 152) )
KiCheckForKernelApcDelivery();
v7 = _interlockedbittestandset64((volatile signed __int32 *)&Lock, 0i64);
if( v1 )
{
if( v7 )
KeAbPostReleaseEx(&Lock, (PVOID)v1);
else
*(_BYTE *)(v1 + 26) |= 1u;
}
LABEL_22:
CurrentIrql = KeGetCurrentIrql();
__writecr8(2ui64);
ExTryAcquireSpinLockExclusiveAtDpcLevel(&SpinLock);
result = CurrentIrql;
__writecr8(CurrentIrql);
return result;
}Referenced by:
KiInitSystem