KiSwInterrupt

VOID __fastcall KiSwInterrupt(UINT64 a1, UINT64 a2, UINT64 a3, UINT64 a4, CHAR a5){
  unsigned __int64 v5; 
  unsigned __int64 v6; 
  unsigned __int64 v7; 
  _M128A v8; 
  _M128A v9; 
  _M128A v10; 
  _M128A v11; 
  _M128A v12; 
  _M128A v13; 
  _KTRAP_FRAME *__shifted(_KTRAP_FRAME,0x80) TrapFrame; 
  _ETHREAD *CurrentThread; 
  unsigned __int8 v16; 
  char v17; 
  bool v18; 
  unsigned __int8 CurrentIrql; 
  struct _KPRCB *CurrentPrcb; 
  __int64 v21; 
  UINT64 v22; 
  __int64 v23; 
  UINT64 v24; 
  int v25; 
  INT64 v26; 
  INT64 v27; 
  INT64 v28; 
  struct _KPRCB *v29; 
  unsigned __int64 v30; 
  UINT64 v31; 
  _ETHREAD *v32; 
  _KTHREAD *v33; 
  INT64 R9; 
  INT64 R8; 
  unsigned __int8 v36; 
  unsigned __int8 v37; 
  CHAR v40; 
  void *retaddr; 
  __int16 v42; 
  int v43; 
  void *v44; 
  __int16 v45; 
  TrapFrame = KeGetTrapFrame();
  ADJ(TrapFrame)->ExceptionActive = 0;
  ADJ(TrapFrame)->Rax = v5;
  ADJ(TrapFrame)->Rcx = a1;
  ADJ(TrapFrame)->Rdx = a2;
  ADJ(TrapFrame)->R8 = a3;
  ADJ(TrapFrame)->R9 = a4;
  ADJ(TrapFrame)->R10 = v6;
  ADJ(TrapFrame)->R11 = v7;
  if( (ADJ(TrapFrame)->SegCs & 1) != 0 )
  {
    if( (KiKvaShadow & 1) == 0 )
      __swapgs();
    _mm_lfence();
    CurrentThread = (_ETHREAD *)KeGetCurrentThread();
    __writegsqword(0x270u, *(_QWORD *)(*((_QWORD *)CurrentThread + 68) + 2528i64));
    __writegsbyte(0x851u, *((_BYTE *)KeGetPcr() + 2128));
    __writegsbyte(0x852u, *((_BYTE *)KeGetPcr() + 632));
    v16 = *((_BYTE *)KeGetPcr() + 635);
    if( *((_BYTE *)KeGetPcr() + 634) != v16 )
    {
      __writegsbyte(0x27Au, v16);
      __writemsr(0x48u, v16);
    }
    v17 = *((_BYTE *)KeGetPcr() + 632);
    if( (v17 & 8) != 0 )
    {
      __writemsr(0x49u, 1ui64);
      v17 = *((_BYTE *)KeGetPcr() + 632);
    }
    if( (v17 & 2) != 0 )
      __flush_rsb();
    _mm_lfence();
    __writegsbyte(0x853u, 0);
    v18 = (*((_BYTE *)CurrentThread + 3) & 3) == 0;
    LOWORD(ADJ(TrapFrame)->Dr7) = 0;
    if( !v18 )
      KiSaveDebugRegisterState();
  }
  else
  {
    _mm_lfence();
    if( (*((_BYTE *)KeGetPcr() + 632) & 1) != 0 )
      __writemsr(0x48u, *((unsigned __int8 *)KeGetPcr() + 634));
    else
      _mm_lfence();
  }
  ADJ(TrapFrame)->MxCsr = _mm_getcsr();
  _mm_setcsr(*((_DWORD *)KeGetPcr() + 96));
  ADJ(TrapFrame)->Xmm0 = v8;
  ADJ(TrapFrame)->Xmm1 = v9;
  ADJ(TrapFrame)->Xmm2 = v10;
  ADJ(TrapFrame)->Xmm3 = v11;
  ADJ(TrapFrame)->Xmm4 = v12;
  ADJ(TrapFrame)->Xmm5 = v13;
  if( *((_BYTE *)KeGetPcr() + 32794) )
    KeWakeProcessor();
  if( (unsigned __int64)&ExpInterlockedPopEntrySListResume < ADJ(TrapFrame)->Rip
    && (unsigned __int64)&ExpInterlockedPopEntrySListEnd >= ADJ(TrapFrame)->Rip )
  {
    KiCheckForSListAddress(ADJ(TrapFrame));
  }
  __incgsdword(0x8000u);
  if( (_BYTE)KeSmapEnabled )
    __clac();
  CurrentIrql = KeGetCurrentIrql();
  __writecr8(2ui64);
  ADJ(TrapFrame)->PreviousIrql = CurrentIrql;
  CurrentPrcb = KeGetCurrentPrcb();
  if( ++*((_BYTE *)CurrentPrcb + 32) == 1 )
  {
    v21 = *((_QWORD *)CurrentPrcb + 1);
    v22 = __rdtsc() - *((_QWORD *)CurrentPrcb + 4056);
    *(_QWORD *)(v21 + 72) += v22;
    v23 = *(unsigned int *)(v21 + 80);
    *((_QWORD *)CurrentPrcb + 4056) += v22;
    v24 = v22 + v23;
    v25 = v24;
    if( HIDWORD(v24) )
      v25 = -1;
    *(_DWORD *)(v21 + 80) = v25;
    if( (*(_BYTE *)(v21 + 2) & 0x3E) != 0 )
      KiEndThreadAccountingPeriod(KeGetCurrentPrcb(), (_KTHREAD *)v21, v22);
  }
  _enable();
  KiSwInterruptDispatch((INT64)ADJ(TrapFrame));
  _disable();
  HalPerformEndOfInterrupt(0i64);
  v29 = KeGetCurrentPrcb();
  if( *((_BYTE *)v29 + 32) <= 1u )
  {
    v30 = __rdtsc();
    v26 = (unsigned __int64)HIDWORD(v30) << 32;
    v31 = (v26 | (unsigned int)v30) - *((_QWORD *)v29 + 4056);
    *((_QWORD *)v29 + 4071) += v31;
    *((_QWORD *)v29 + 4056) += v31;
    v27 = v31;
    if( (*(_BYTE *)(*((_QWORD *)v29 + 1) + 2i64) & 0x72) != 0 )
    {
      KiBeginThreadAccountingPeriod(v29, 0i64, v31);
      v29 = KeGetCurrentPrcb();
      ++*((_BYTE *)v29 + 32);
    }
    LOBYTE(v26) = *((_BYTE *)v29 + 6);
    *((_BYTE *)v29 + 6) = 0;
    if( !*((_BYTE *)v29 + 7) )
    {
      if( (_BYTE)v26 )
      {
        if( ADJ(TrapFrame)->PreviousIrql < 2u )
        {
          *((_BYTE *)v29 + 32) = 0;
          KiDpcInterruptBypass();
          goto LABEL_36;
        }
        HalRequestSoftwareInterrupt(2i64);
        v29 = KeGetCurrentPrcb();
      }
    }
  }
  --*((_BYTE *)v29 + 32);
LABEL_36:
  __writecr8(ADJ(TrapFrame)->PreviousIrql);
  _disable();
  if( (ADJ(TrapFrame)->SegCs & 1) == 0 )
  {
    _mm_setcsr(ADJ(TrapFrame)->MxCsr);
    __iretq(retaddr, v42, v43, v44, v45);
  }
  if( (_BYTE)KeSmapEnabled )
    __stac();
  while( (*((_BYTE *)KeGetCurrentThread() + 194) & 3) != 0 )
  {
    __writecr8(1ui64);
    _enable();
    KiInitiateUserApc((_KTRAP_FRAME *)1);
    _disable();
    __writecr8(0i64);
  }
  if( (*((_BYTE *)KeGetPcr() + 638) & 2) != 0 )
    KiUpdateStibpPairing(0i64);
  v32 = (_ETHREAD *)KeGetCurrentThread();
  if( (*(_DWORD *)v32 & 0x8000000) != 0 )
    KiRestoreSetContextState((INT64)v32, v26, v27, v28, v40);
  v33 = (_ETHREAD *)KeGetCurrentThread();
  if( (*(_DWORD *)v33 & 0x40010000) != 0 && (*((_BYTE *)v33 + 2) & 1) != 0 )
    KiCopyCounters((_KTHREAD *)v33);
  _mm_setcsr(ADJ(TrapFrame)->MxCsr);
  if( LOWORD(ADJ(TrapFrame)->Dr7) )
    KiRestoreDebugRegisterState();
  R9 = ADJ(TrapFrame)->R9;
  R8 = ADJ(TrapFrame)->R8;
  __writegsbyte(0x853u, 0);
  v36 = *((_BYTE *)KeGetPcr() + 637);
  if( *((_BYTE *)KeGetPcr() + 634) != v36 )
  {
    __writegsbyte(0x27Au, v36);
    __writemsr(0x48u, v36);
  }
  v37 = _bittestandreset16(MK_FP(__GS__, 632i64), 2u);
  if( v37 )
    __writemsr(0x49u, 1ui64);
  v37 = _bittestandreset16(MK_FP(__GS__, 632i64), 5u);
  if( v37 )
    __flush_rsb();
  if( (KiKvaShadow & 1) == 0 )
  {
    __swapgs();
    __iretq(retaddr, v42, v43, v44, v45);
  }
  KiKernelExit(ADJ(TrapFrame)->Rcx, ADJ(TrapFrame)->Rdx, R8, R9, a5);
}

Referenced by: