PopPepPlatformStateRegistered
VOID __stdcall PopPepPlatformStateRegistered(UINT64 PlatformStateCount){
_ETHREAD *CurrentThread;
__int64 v2;
_ETHREAD *v3;
unsigned int v4;
unsigned int SessionId;
char v6;
int v7;
bool v8;
__int64 v9;
unsigned __int64 v10;
int v11;
unsigned int v12;
__int64 v13;
_ETHREAD *v14;
char v15;
int v16;
unsigned __int64 v17;
__int64 v18;
int v19;
unsigned int v20;
__int64 v21;
_ETHREAD *v22;
unsigned int v23;
unsigned int v24;
char v25;
int v26;
__int64 v27;
unsigned __int64 v28;
int v29;
unsigned int v30;
unsigned __int8 v31;
__int64 v32;
__int64 v33;
INT64 v34;
KIRQL v35;
int v36;
unsigned __int64 v37;
_ETHREAD *v38;
char v39;
int v40;
unsigned __int64 v41;
__int64 v42;
int v43;
unsigned int v44;
__int64 v45;
int v46;
int v47;
unsigned int v48[2];
int v49[4];
unsigned int v50;
int v51;
int v52;
v50 = PlatformStateCount;
CurrentThread = (_ETHREAD *)KeGetCurrentThread();
v2 = (unsigned int)PlatformStateCount;
--*((_WORD *)CurrentThread + 242);
ExAcquirePushLockExclusiveEx((UINT64)&PopPepVetoMaskReadyLock, 0i64);
ExAcquirePushLockExclusiveEx((UINT64)&PopPepDeviceListLock, 0i64);
if( PopPepPlatformState )
{
if( (_InterlockedExchangeAdd64((volatile signed __int64 *)&PopPepDeviceListLock, 0xFFFFFFFFFFFFFFFFui64) & 6) == 2 )
ExfTryToWakePushLock((volatile INT64 *)&PopPepDeviceListLock);
v3 = (_ETHREAD *)KeGetCurrentThread();
v51 = 0;
v4 = -1;
if( (unsigned int)MiGetSystemRegionType((UINT64)&PopPepDeviceListLock) == 1 )
SessionId = MmGetSessionIdEx(*((_QWORD *)v3 + 23));
else
SessionId = -1;
--*((_WORD *)v3 + 243);
v6 = ++*((_BYTE *)v3 + 794);
v7 = (*((char *)v3 + 792) | *((char *)v3 + 870)) ^ 0x3F;
v8 = !_BitScanReverse((unsigned int *)&v9, v7);
if( v8 )
goto LABEL_14;
while( 1 )
{
v10 = *((_QWORD *)v3 + 100) + 96 * v9;
v7 &= ~(1 << v9);
if( (*(_BYTE *)(v10 + 26) & 1) != 0
&& (*(_DWORD *)(v10 + 32) & 1) == 0
&& (*(_QWORD *)(v10 + 32) & 0x7FFFFFFFFFFFFFFCi64) == ((unsigned __int64)&PopPepDeviceListLock & 0x7FFFFFFFFFFFFFFCi64)
&& *(_DWORD *)(v10 + 40) == SessionId )
{
*(_BYTE *)(v10 + 26) &= ~1u;
if( *(_QWORD *)(v10 + 32) )
break;
}
v8 = !_BitScanReverse((unsigned int *)&v9, v7);
if( v8 )
goto LABEL_14;
}
if( !v10 )
{
LABEL_14:
if( (*((_DWORD *)v3 + 30) & 0x10000) == 0 )
KeBugCheckEx(0x162u, (ULONG_PTR)v3, (ULONG_PTR)&PopPepDeviceListLock, SessionId, 0i64);
}
else
{
*(_BYTE *)(v10 + 32) |= 2u;
if( *(__int64 *)(v10 + 32) < 0 )
KiAbEntryRemoveFromTree(v10);
v11 = *(_DWORD *)(v10 + 88) & 0x1FFFF;
v12 = *(_DWORD *)(v10 + 88) & 0xFFFE0000;
*(_BYTE *)(v10 + 25) &= ~1u;
v51 = v11;
*(_DWORD *)(v10 + 88) = v12;
*(_QWORD *)(v10 + 32) = 0i64;
v13 = (__int64)(v10 - *((_QWORD *)v3 + 100)) / 96;
if( v6 == 1 )
*((_BYTE *)v3 + 792) |= 1 << v13;
else
_InterlockedOr8((volatile signed __int8 *)v3 + 870, 1 << v13);
}
--*((_BYTE *)v3 + 794);
KiAbThreadRemoveBoosts((ULONG_PTR)v3, (__int64)&PopPepDeviceListLock, (unsigned int *)&v51);
v8 = (*((_WORD *)v3 + 243))++ == 0xFFFF;
if( v8 && *((_ETHREAD **)v3 + 19) != (_ETHREAD *)((char *)v3 + 152) )
KiCheckForKernelApcDelivery();
if( (_InterlockedExchangeAdd64((volatile signed __int64 *)&PopPepVetoMaskReadyLock, 0xFFFFFFFFFFFFFFFFui64) & 6) == 2 )
ExfTryToWakePushLock((volatile INT64 *)&PopPepVetoMaskReadyLock);
v46 = 0;
v14 = (_ETHREAD *)KeGetCurrentThread();
if( (unsigned int)MiGetSystemRegionType((UINT64)&PopPepVetoMaskReadyLock) == 1 )
v4 = MmGetSessionIdEx(*((_QWORD *)v14 + 23));
--*((_WORD *)v14 + 243);
v15 = ++*((_BYTE *)v14 + 794);
v16 = (*((char *)v14 + 792) | *((char *)v14 + 870)) ^ 0x3F;
while( 1 )
{
v8 = !_BitScanReverse((unsigned int *)&v18, v16);
v52 = v18;
if( v8 )
goto LABEL_36;
v17 = *((_QWORD *)v14 + 100) + 96 * v18;
v16 &= ~(1 << v18);
if( (*(_BYTE *)(v17 + 26) & 1) != 0
&& (*(_DWORD *)(v17 + 32) & 1) == 0
&& (*(_QWORD *)(v17 + 32) & 0x7FFFFFFFFFFFFFFCi64) == ((unsigned __int64)&PopPepVetoMaskReadyLock & 0x7FFFFFFFFFFFFFFCi64)
&& *(_DWORD *)(v17 + 40) == v4 )
{
*(_BYTE *)(v17 + 26) &= ~1u;
if( *(_QWORD *)(v17 + 32) )
break;
}
}
if( !v17 )
{
LABEL_36:
if( (*((_DWORD *)v14 + 30) & 0x10000) == 0 )
KeBugCheckEx(0x162u, (ULONG_PTR)v14, (ULONG_PTR)&PopPepVetoMaskReadyLock, v4, 0i64);
goto LABEL_43;
}
*(_BYTE *)(v17 + 32) |= 2u;
if( *(__int64 *)(v17 + 32) < 0 )
KiAbEntryRemoveFromTree(v17);
v19 = *(_DWORD *)(v17 + 88) & 0x1FFFF;
v20 = *(_DWORD *)(v17 + 88) & 0xFFFE0000;
*(_BYTE *)(v17 + 25) &= ~1u;
v46 = v19;
*(_DWORD *)(v17 + 88) = v20;
*(_QWORD *)(v17 + 32) = 0i64;
v21 = (__int64)(v17 - *((_QWORD *)v14 + 100)) / 96;
if( v15 == 1 )
*((_BYTE *)v14 + 792) |= 1 << v21;
else
_InterlockedOr8((volatile signed __int8 *)v14 + 870, 1 << v21);
LABEL_43:
--*((_BYTE *)v14 + 794);
KiAbThreadRemoveBoosts((ULONG_PTR)v14, (__int64)&PopPepVetoMaskReadyLock, (unsigned int *)&v46);
v8 = (*((_WORD *)v14 + 243))++ == 0xFFFF;
if( v8 && *((_ETHREAD **)v14 + 19) != (_ETHREAD *)((char *)v14 + 152) )
KiCheckForKernelApcDelivery();
KeLeaveCriticalRegionThread((__int64)KeGetCurrentThread());
}
else
{
PopPepPlatformState = PpmPlatformStates + 64;
if( (_InterlockedExchangeAdd64((volatile signed __int64 *)&PopPepDeviceListLock, 0xFFFFFFFFFFFFFFFFui64) & 6) == 2 )
ExfTryToWakePushLock((volatile INT64 *)&PopPepDeviceListLock);
v22 = (_ETHREAD *)KeGetCurrentThread();
v48[0] = 0;
v23 = -1;
if( (unsigned int)MiGetSystemRegionType((UINT64)&PopPepDeviceListLock) == 1 )
v24 = MmGetSessionIdEx(*((_QWORD *)v22 + 23));
else
v24 = -1;
--*((_WORD *)v22 + 243);
v25 = ++*((_BYTE *)v22 + 794);
v26 = (*((char *)v22 + 792) | *((char *)v22 + 870)) ^ 0x3F;
v8 = !_BitScanReverse((unsigned int *)&v27, v26);
v47 = v27;
if( v8 )
goto LABEL_60;
while( 1 )
{
v28 = *((_QWORD *)v22 + 100) + 96 * v27;
v26 &= ~(1 << v27);
if( (*(_BYTE *)(v28 + 26) & 1) != 0
&& (*(_DWORD *)(v28 + 32) & 1) == 0
&& (*(_QWORD *)(v28 + 32) & 0x7FFFFFFFFFFFFFFCi64) == ((unsigned __int64)&PopPepDeviceListLock & 0x7FFFFFFFFFFFFFFCi64)
&& *(_DWORD *)(v28 + 40) == v24 )
{
*(_BYTE *)(v28 + 26) &= ~1u;
if( *(_QWORD *)(v28 + 32) )
break;
}
v8 = !_BitScanReverse((unsigned int *)&v27, v26);
v47 = v27;
if( v8 )
goto LABEL_60;
}
if( !v28 )
{
LABEL_60:
if( (*((_DWORD *)v22 + 30) & 0x10000) == 0 )
KeBugCheckEx(0x162u, (ULONG_PTR)v22, (ULONG_PTR)&PopPepDeviceListLock, v24, 0i64);
}
else
{
*(_BYTE *)(v28 + 32) |= 2u;
if( *(__int64 *)(v28 + 32) < 0 )
KiAbEntryRemoveFromTree(v28);
v29 = *(_DWORD *)(v28 + 88) & 0x1FFFF;
v30 = *(_DWORD *)(v28 + 88) & 0xFFFE0000;
*(_BYTE *)(v28 + 25) &= ~1u;
v48[0] = v29;
*(_DWORD *)(v28 + 88) = v30;
*(_QWORD *)(v28 + 32) = 0i64;
v31 = 1 << ((__int64)(v28 - *((_QWORD *)v22 + 100)) / 96);
if( v25 == 1 )
*((_BYTE *)v22 + 792) |= v31;
else
_InterlockedOr8((volatile signed __int8 *)v22 + 870, v31);
}
--*((_BYTE *)v22 + 794);
KiAbThreadRemoveBoosts((ULONG_PTR)v22, (__int64)&PopPepDeviceListLock, v48);
v8 = (*((_WORD *)v22 + 243))++ == 0xFFFF;
if( v8 && *((_ETHREAD **)v22 + 19) != (_ETHREAD *)((char *)v22 + 152) )
KiCheckForKernelApcDelivery();
ExAcquirePushLockSharedEx((UINT64)&PopPepDeviceListLock, 0i64);
if( (_DWORD)v2 )
{
v32 = 0i64;
v33 = v2;
do
{
v32 += 384i64;
*(_DWORD *)(v32 + PopPepPlatformState - 64) = 1073741825;
--v33;
}
while( v33 );
}
v34 = PopPepDeviceList;
if( (INT64 *)PopPepDeviceList != &PopPepDeviceList )
{
do
{
v35 = ExAcquireSpinLockShared((PEX_SPIN_LOCK)(v34 + 64));
v36 = *(_DWORD *)(v34 + 172);
v37 = v35;
ExReleaseSpinLockSharedFromDpcLevel((PEX_SPIN_LOCK)(v34 + 64));
__writecr8(v37);
if( v36 == 1 )
PopPepInitializeVetoMasks(v34, v50);
v34 = *(_QWORD *)v34;
}
while( (INT64 *)v34 != &PopPepDeviceList );
LOBYTE(v2) = v50;
v23 = -1;
}
if( _InterlockedCompareExchange64((volatile signed __int64 *)&PopPepDeviceListLock, 0i64, 17i64) != 17 )
ExfReleasePushLockShared((INT64 *)&PopPepDeviceListLock);
KeAbPostRelease(&PopPepDeviceListLock);
if( (_InterlockedExchangeAdd64((volatile signed __int64 *)&PopPepVetoMaskReadyLock, 0xFFFFFFFFFFFFFFFFui64) & 6) == 2 )
ExfTryToWakePushLock((volatile INT64 *)&PopPepVetoMaskReadyLock);
v49[0] = 0;
v38 = (_ETHREAD *)KeGetCurrentThread();
if( (unsigned int)MiGetSystemRegionType((UINT64)&PopPepVetoMaskReadyLock) == 1 )
v23 = MmGetSessionIdEx(*((_QWORD *)v38 + 23));
--*((_WORD *)v38 + 243);
v39 = ++*((_BYTE *)v38 + 794);
v40 = (*((char *)v38 + 792) | *((char *)v38 + 870)) ^ 0x3F;
while( 1 )
{
v8 = !_BitScanReverse((unsigned int *)&v42, v40);
v48[1] = v42;
if( v8 )
goto LABEL_92;
v41 = *((_QWORD *)v38 + 100) + 96 * v42;
v40 &= ~(1 << v42);
if( (*(_BYTE *)(v41 + 26) & 1) != 0
&& (*(_DWORD *)(v41 + 32) & 1) == 0
&& (*(_QWORD *)(v41 + 32) & 0x7FFFFFFFFFFFFFFCi64) == ((unsigned __int64)&PopPepVetoMaskReadyLock & 0x7FFFFFFFFFFFFFFCi64)
&& *(_DWORD *)(v41 + 40) == v23 )
{
*(_BYTE *)(v41 + 26) &= ~1u;
if( *(_QWORD *)(v41 + 32) )
break;
}
}
if( !v41 )
{
LABEL_92:
if( (*((_DWORD *)v38 + 30) & 0x10000) == 0 )
KeBugCheckEx(0x162u, (ULONG_PTR)v38, (ULONG_PTR)&PopPepVetoMaskReadyLock, v23, 0i64);
goto LABEL_99;
}
*(_BYTE *)(v41 + 32) |= 2u;
if( *(__int64 *)(v41 + 32) < 0 )
KiAbEntryRemoveFromTree(v41);
v43 = *(_DWORD *)(v41 + 88) & 0x1FFFF;
v44 = *(_DWORD *)(v41 + 88) & 0xFFFE0000;
*(_BYTE *)(v41 + 25) &= ~1u;
v49[0] = v43;
*(_DWORD *)(v41 + 88) = v44;
*(_QWORD *)(v41 + 32) = 0i64;
v45 = (__int64)(v41 - *((_QWORD *)v38 + 100)) / 96;
if( v39 == 1 )
*((_BYTE *)v38 + 792) |= 1 << v45;
else
_InterlockedOr8((volatile signed __int8 *)v38 + 870, 1 << v45);
LABEL_99:
--*((_BYTE *)v38 + 794);
KiAbThreadRemoveBoosts((ULONG_PTR)v38, (__int64)&PopPepVetoMaskReadyLock, (unsigned int *)v49);
v8 = (*((_WORD *)v38 + 243))++ == 0xFFFF;
if( v8 && *((_ETHREAD **)v38 + 19) != (_ETHREAD *)((char *)v38 + 152) )
KiCheckForKernelApcDelivery();
KeLeaveCriticalRegionThread((__int64)KeGetCurrentThread());
PopPepUpdateIdleStateRefCount((unsigned int)((1 << v2) - 1), 0i64, 0i64);
}
}Referenced by:
PopFxEnablePlatformStates