IoQueryKsrPersistentMemorySize

INT64 __fastcall IoQueryKsrPersistentMemorySize(INT64 a1, INT64 a2, size_t *a3){
  __int64 v6; 
  __int16 *v7; 
  _WORD *v8; 
  PVOID *v9; 
  PVOID *v10; 
  __int64 v11; 
  _WORD *v12; 
  __int64 v13; 
  _WORD *v14; 
  __int64 v15; 
  INT64 result; 
  ULONG_PTR BugCheckParameter4; 
  if( KeGetCurrentIrql() )
    KeBugCheckEx(0x121u, 1ui64, KeGetCurrentIrql(), 0i64, 0i64);
  if( a2 )
  {
    v6 = *(_QWORD *)(*(_QWORD *)(a2 + 312) + 40i64);
    if( !v6 || (*(_DWORD *)(v6 + 396) & 0x20000) != 0 )
    {
      IoAddTriageDumpDataBlock((PVOID)a2, *(unsigned __int16 *)(a2 + 2));
      v7 = *(__int16 **)(a2 + 8);
      if( v7 )
      {
        IoAddTriageDumpDataBlock(v7, (unsigned int)v7[1]);
        v8 = (_WORD *)(*(_QWORD *)(a2 + 8) + 56i64);
        if( *v8 )
        {
          IoAddTriageDumpDataBlock(v8, 2ui64);
          IoAddTriageDumpDataBlock(
            *(PVOID *)(*(_QWORD *)(a2 + 8) + 64i64),
            *(unsigned __int16 *)(*(_QWORD *)(a2 + 8) + 56i64));
        }
      }
      v9 = *(PVOID **)(*(_QWORD *)(a2 + 312) + 40i64);
      if( v9 )
      {
        v10 = v9 + 5;
        IoAddTriageDumpDataBlock(v9, 0x310ui64);
        if( *(_WORD *)v10 )
        {
          IoAddTriageDumpDataBlock(v10, 2ui64);
          IoAddTriageDumpDataBlock(v10[1], *(unsigned __int16 *)v10);
        }
        v11 = *(_QWORD *)(a2 + 312);
        v12 = (_WORD *)(*(_QWORD *)(v11 + 40) + 56i64);
        if( *v12 )
        {
          IoAddTriageDumpDataBlock(v12, 2ui64);
          IoAddTriageDumpDataBlock(
            *(PVOID *)(*(_QWORD *)(*(_QWORD *)(a2 + 312) + 40i64) + 64i64),
            *(unsigned __int16 *)(*(_QWORD *)(*(_QWORD *)(a2 + 312) + 40i64) + 56i64));
          v11 = *(_QWORD *)(a2 + 312);
        }
        v13 = *(_QWORD *)(*(_QWORD *)(v11 + 40) + 16i64);
        if( v13 )
        {
          v14 = (_WORD *)(v13 + 56);
          if( *v14 )
          {
            IoAddTriageDumpDataBlock(v14, 2ui64);
            v15 = *(_QWORD *)(*(_QWORD *)(*(_QWORD *)(a2 + 312) + 40i64) + 16i64);
            IoAddTriageDumpDataBlock(*(PVOID *)(v15 + 64), *(unsigned __int16 *)(v15 + 56));
          }
        }
      }
      KeBugCheckEx(0xCAu, 2ui64, a2, 0i64, 0i64);
    }
  }
  *a3 = 0i64;
  if( !(unsigned __int8)ExIsSoftBoot() )
    return 3221225659i64;
  LODWORD(BugCheckParameter4) = 0;
  result = PipGetPersistentMemory(a1, a2, a3, 0i64, BugCheckParameter4);
  if( (_DWORD)result == -1073741789 && *a3 )
    return 0i64;
  return result;
}

Referenced by: