RtlpHpLfhBucketUpdateAffinityMapping
INT64 __fastcall RtlpHpLfhBucketUpdateAffinityMapping(UINT64 a1, INT64 a2){
unsigned int v4;
char v5;
__int64 v6;
unsigned int SessionId;
__int64 v8;
_ETHREAD *CurrentThread;
__int64 v10;
__int64 v11;
INT64 Slot;
INT64 v13;
UINT8 v14;
unsigned __int8 *v15;
unsigned __int64 v16;
unsigned __int8 *v17;
unsigned int v18;
__int64 v19;
__int64 v20;
__int64 v21;
unsigned int v22;
_BYTE *v23;
unsigned __int8 v24;
_ETHREAD *v25;
char v26;
int v27;
bool v28;
__int64 v29;
unsigned __int64 v30;
__int64 v31;
_ETHREAD *v32;
int v33;
__int64 v34;
unsigned __int64 v35;
unsigned __int8 v36;
__int64 v37;
__int64 v38;
int v39[8];
char v40;
int v41;
unsigned int v42[2];
int v43;
__int64 v44;
UINT64 v45;
__int64 v46;
INT64 result[8];
v45 = a1;
KeGetCurrentProcessorNumberEx(0i64);
v4 = *(unsigned __int8 *)(a1 + 56);
v6 = v5 & 0x3F;
SessionId = -1;
if( (unsigned int)v6 >= v4 )
{
if( (_DWORD)v6 == v4 || (_BYTE)v4 == 1 )
v6 = 0i64;
else
v6 = *(unsigned __int8 *)(*(_QWORD *)(a1 + 48) + -1 - v4 + (unsigned int)v6);
}
v8 = *(_QWORD *)(a2 + 88);
CurrentThread = (_ETHREAD *)KeGetCurrentThread();
v10 = (unsigned int)v6;
v46 = (unsigned int)v6;
v11 = *(unsigned __int8 *)(v6 + v8);
Slot = *((unsigned __int8 *)CurrentThread + 1573);
if( (_DWORD)Slot != (_DWORD)v6 )
{
*((_BYTE *)CurrentThread + 1573) = v6;
return Slot;
}
memset((INT64)result, 0i64);
v13 = a2 + 80;
v14 = RtlpHpAcquireLockExclusive((INT64 *)(a2 + 80), *(unsigned __int8 *)(a1 + 57));
v15 = *(unsigned __int8 **)(a2 + 88);
v16 = v14;
v17 = &v15[v10];
if( (_BYTE)v11 != v15[v10] )
goto LABEL_16;
v18 = *(unsigned __int8 *)(a1 + 56);
if( (_BYTE)v18 )
{
v19 = *(unsigned __int8 *)(a1 + 56);
do
{
v20 = *v15++;
++*((_BYTE *)result + v20);
--v19;
}
while( v19 );
}
if( *((_BYTE *)result + v11) == 1 )
goto LABEL_16;
v21 = (unsigned int)(v11 + 1);
v22 = v21;
if( (unsigned int)v21 < v18 )
{
v23 = (char *)result + (unsigned int)v21;
do
{
if( !*v23 )
break;
if( *v23 < *((_BYTE *)result + v21) )
v21 = v22;
++v22;
++v23;
}
while( v22 < v18 );
}
if( *((_BYTE *)result + v21) )
{
*v17 = v21;
LABEL_16:
if( *(_BYTE *)(a1 + 57) )
{
ExReleaseSpinLockExclusiveFromDpcLevel((INT64 *)(a2 + 80));
Slot = (unsigned int)KiIrqlFlags;
__writecr8(v16);
}
else
{
if( (_InterlockedExchangeAdd64((volatile signed __int64 *)v13, 0xFFFFFFFFFFFFFFFFui64) & 6) == 2 )
ExfTryToWakePushLock((volatile INT64 *)(a2 + 80));
v43 = 0;
v25 = (_ETHREAD *)KeGetCurrentThread();
if( (unsigned int)MiGetSystemRegionType(a2 + 80) == 1 )
SessionId = MmGetSessionIdEx(*((_QWORD *)v25 + 23));
--*((_WORD *)v25 + 243);
v26 = ++*((_BYTE *)v25 + 794);
v27 = (*((char *)v25 + 792) | *((char *)v25 + 870)) ^ 0x3F;
while( 1 )
{
v28 = !_BitScanReverse((unsigned int *)&v29, v27);
v42[1] = v29;
if( v28 )
break;
v30 = *((_QWORD *)v25 + 100) + 96 * v29;
v27 &= ~(1 << v29);
if( (*(_BYTE *)(v30 + 26) & 1) != 0
&& (*(_DWORD *)(v30 + 32) & 1) == 0
&& (*(_QWORD *)(v30 + 32) & 0x7FFFFFFFFFFFFFFCi64) == (v13 & 0x7FFFFFFFFFFFFFFCi64)
&& *(_DWORD *)(v30 + 40) == SessionId )
{
*(_BYTE *)(v30 + 26) &= ~1u;
if( *(_QWORD *)(v30 + 32) )
{
if( v30 )
{
*(_BYTE *)(v30 + 32) |= 2u;
if( *(__int64 *)(v30 + 32) < 0 )
KiAbEntryRemoveFromTree(v30);
v43 = *(_DWORD *)(v30 + 88) & 0x1FFFF;
*(_DWORD *)(v30 + 88) &= 0xFFFE0000;
*(_BYTE *)(v30 + 25) &= ~1u;
*(_QWORD *)(v30 + 32) = 0i64;
v31 = (__int64)(v30 - *((_QWORD *)v25 + 100)) / 96;
if( v26 == 1 )
*((_BYTE *)v25 + 792) |= 1 << v31;
else
_InterlockedOr8((volatile signed __int8 *)v25 + 870, 1 << v31);
goto LABEL_33;
}
break;
}
}
}
if( (*((_DWORD *)v25 + 30) & 0x10000) == 0 )
KeBugCheckEx(0x162u, (ULONG_PTR)v25, v13, SessionId, 0i64);
LABEL_33:
--*((_BYTE *)v25 + 794);
KiAbThreadRemoveBoosts((ULONG_PTR)v25, v13, (unsigned int *)&v43);
v28 = (*((_WORD *)v25 + 243))++ == 0xFFFF;
if( v28 && *((_ETHREAD **)v25 + 19) != (_ETHREAD *)((char *)v25 + 152) )
KiCheckForKernelApcDelivery();
return KiLeaveGuardedRegionUnsafe((__int64)KeGetCurrentThread());
}
return Slot;
}
v24 = *(_BYTE *)(a2 + 77);
if( v24 < 0x1Eu )
{
*(_BYTE *)(a2 + 77) = v24 + 1;
goto LABEL_16;
}
if( *(_BYTE *)(a1 + 57) )
{
ExReleaseSpinLockExclusiveFromDpcLevel((INT64 *)(a2 + 80));
__writecr8(v16);
}
else
{
if( (_InterlockedExchangeAdd64((volatile signed __int64 *)v13, 0xFFFFFFFFFFFFFFFFui64) & 6) == 2 )
ExfTryToWakePushLock((volatile INT64 *)(a2 + 80));
v42[0] = 0;
v32 = (_ETHREAD *)KeGetCurrentThread();
if( (unsigned int)MiGetSystemRegionType(a2 + 80) == 1 )
SessionId = MmGetSessionIdEx(*((_QWORD *)v32 + 23));
--*((_WORD *)v32 + 243);
v40 = ++*((_BYTE *)v32 + 794);
v33 = (*((char *)v32 + 792) | *((char *)v32 + 870)) ^ 0x3F;
while( 1 )
{
v28 = !_BitScanReverse((unsigned int *)&v34, v33);
v41 = v34;
if( v28 )
break;
v35 = *((_QWORD *)v32 + 100) + 96 * v34;
v33 &= ~(1 << v34);
if( (*(_BYTE *)(v35 + 26) & 1) != 0
&& (*(_DWORD *)(v35 + 32) & 1) == 0
&& (*(_QWORD *)(v35 + 32) & 0x7FFFFFFFFFFFFFFCi64) == (v13 & 0x7FFFFFFFFFFFFFFCi64)
&& *(_DWORD *)(v35 + 40) == SessionId )
{
*(_BYTE *)(v35 + 26) &= ~1u;
if( *(_QWORD *)(v35 + 32) )
{
if( v35 )
{
*(_BYTE *)(v35 + 32) |= 2u;
if( *(__int64 *)(v35 + 32) < 0 )
KiAbEntryRemoveFromTree(v35);
v42[0] = *(_DWORD *)(v35 + 88) & 0x1FFFF;
*(_DWORD *)(v35 + 88) &= 0xFFFE0000;
*(_BYTE *)(v35 + 25) &= ~1u;
*(_QWORD *)(v35 + 32) = 0i64;
v36 = 1 << ((char)(v35 - *((_BYTE *)v32 + 800)) / 96);
if( v40 == 1 )
*((_BYTE *)v32 + 792) |= v36;
else
_InterlockedOr8((volatile signed __int8 *)v32 + 870, v36);
goto LABEL_61;
}
break;
}
}
}
if( (*((_DWORD *)v32 + 30) & 0x10000) == 0 )
KeBugCheckEx(0x162u, (ULONG_PTR)v32, a2 + 80, SessionId, 0i64);
LABEL_61:
--*((_BYTE *)v32 + 794);
KiAbThreadRemoveBoosts((ULONG_PTR)v32, a2 + 80, v42);
v28 = (*((_WORD *)v32 + 243))++ == 0xFFFF;
if( v28 && *((_ETHREAD **)v32 + 19) != (_ETHREAD *)((char *)v32 + 152) )
KiCheckForKernelApcDelivery();
KiLeaveGuardedRegionUnsafe((__int64)KeGetCurrentThread());
}
v44 = 0i64;
v37 = *(_QWORD *)(a2 + 96);
LOWORD(v44) = 2;
Slot = _InterlockedCompareExchange64((volatile signed __int64 *)(v37 + 8 * v21), 2i64, 0i64);
if( !Slot )
{
Slot = RtlpHpLfhBucketAllocateSlot(v45, a2, (unsigned int)v21);
*(_QWORD *)(*(_QWORD *)(a2 + 96) + 8 * v21) = Slot;
if( Slot )
{
_InterlockedOr(v39, 0);
v38 = v46;
*(_BYTE *)(a2 + 2) = v21 + 1;
Slot = *(_QWORD *)(a2 + 88);
*(_BYTE *)(v38 + Slot) = v21;
*(_BYTE *)(a2 + 77) = 0;
}
}
return Slot;
}Referenced by:
RtlpHpLfhSlotAllocate