KiScanInterruptObjectList
VOID __fastcall KiScanInterruptObjectList(){
__int64 v0;
__int64 v1;
unsigned __int8 CurrentIrql;
struct _KPRCB *CurrentPrcb;
unsigned __int64 v4;
int v5;
_DWORD *v6;
__int64 v7;
UINT64 v8;
__int64 v9;
UINT64 v10;
int v11;
__int64 v12;
bool v13;
int v14;
__int64 v15;
unsigned __int64 v16;
unsigned __int64 v17;
INT64 v18;
UINT8 v19;
LARGE_INTEGER v20[8];
CurrentIrql = KeGetCurrentIrql();
__writecr8(*(unsigned __int8 *)(v1 + 92));
*(_BYTE *)(v0 - 87) = CurrentIrql;
*(_DWORD *)(v0 - 96) = 0;
CurrentPrcb = KeGetCurrentPrcb();
if( ++*((_BYTE *)CurrentPrcb + 32) == 1 )
{
v4 = __rdtsc();
v5 = *((_DWORD *)CurrentPrcb + 8568);
v6 = (_DWORD *)((char *)CurrentPrcb + 4 * ((unsigned __int16)(v5 & 0x7FF) >> 5) + 34276);
*v6 = v4 ^ __ROR4__(*v6, 5);
*((_DWORD *)CurrentPrcb + 8568) = ++v5;
if( (v5 & 0x3FF) == 0 )
*(_DWORD *)(v0 - 96) = 1;
v7 = *((_QWORD *)CurrentPrcb + 1);
v8 = v4 - *((_QWORD *)CurrentPrcb + 4056);
*(_QWORD *)(v7 + 72) += v8;
v9 = *(unsigned int *)(v7 + 80);
*((_QWORD *)CurrentPrcb + 4056) += v8;
v10 = v8 + v9;
v11 = v10;
if( HIDWORD(v10) )
v11 = -1;
*(_DWORD *)(v7 + 80) = v11;
if( (*(_BYTE *)(v7 + 2) & 0x3E) != 0 )
KiEndThreadAccountingPeriod(KeGetCurrentPrcb(), (_KTHREAD *)v7, v8);
}
_enable();
if( *(_DWORD *)(v0 - 96) )
KiEntropyQueueDpc((__int64)KeGetCurrentPrcb());
v12 = v1 + 8;
v13 = (PerfGlobalGroupMask & 0x400000000000i64) == 0;
*(_BYTE *)(v0 + 243) = (PerfGlobalGroupMask & 0x400000000000i64) != 0;
if( !v13 )
EtwGetKernelTraceTimestamp(v20, 0x20004000ui64);
while( 2 )
{
v14 = 0;
do
{
v15 = v12 - 8;
if( (*(_DWORD *)(v15 + 104) & 1) != 0 )
{
v19 = 0;
}
else
{
v16 = *(unsigned __int8 *)(v15 + 93);
if( !(_BYTE)v16 )
{
KiDispatchPassiveInterrupts(v15);
goto LABEL_26;
}
if( (_BYTE)v16 != *(_BYTE *)(v1 + 92) )
__writecr8(v16);
v19 = KiCallInterruptServiceRoutine((_KINTERRUPT *)v15, 1u);
v17 = *(unsigned __int8 *)(v1 + 92);
if( (_BYTE)v17 != *(_BYTE *)(v15 + 93) )
__writecr8(v17);
}
if( *(_BYTE *)(v0 + 243) )
{
v18 = v19;
BYTE1(v18) = *(_BYTE *)(v15 + 88);
PerfInfoLogInterrupt(v15, v18, (INT64)v20);
EtwGetKernelTraceTimestamp(v20, 0x20004000ui64);
}
if( v19 )
{
if( *(_WORD *)(v15 + 108) != 1 )
goto LABEL_26;
++v14;
}
v12 = *(_QWORD *)(v15 + 8);
}
while( v12 != v1 + 8 );
if( v14 )
continue;
break;
}
LABEL_26:
_disable();
}Referenced by:
No references.