EtwpFreeCompression
VOID __stdcall EtwpFreeCompression(_WMI_LOGGER_CONTEXT *LoggerContext){
void *CompressionWorkspace;
_ETHREAD *CurrentThread;
unsigned int SessionId;
unsigned __int8 v5;
int v6;
bool v7;
__int64 v8;
_KLOCK_ENTRY *v9;
int v10;
unsigned int v11;
__int64 v12;
UINT64 a3;
KeRemoveQueueDpcEx(&LoggerContext->CompressionDpc, 0i64);
if( LoggerContext->CompressionOn )
{
ExAcquirePushLockExclusiveEx(&LoggerContext->CompressionLock, 0i64);
EtwpRelinquishCompressionTarget(LoggerContext);
if( (_InterlockedExchangeAdd64(&LoggerContext->CompressionLock._bf_0, 0xFFFFFFFFFFFFFFFFui64) & 6) == 2 )
ExfTryToWakePushLock(&LoggerContext->CompressionLock);
LODWORD(a3) = 0;
CurrentThread = (_ETHREAD *)KeGetCurrentThread();
if( MiGetSystemRegionType((UINT64)&LoggerContext->CompressionLock) == 1 )
SessionId = MmGetSessionIdEx(CurrentThread->Tcb.ApcState.Process);
else
SessionId = -1;
--CurrentThread->Tcb.SpecialApcDisable;
v5 = ++CurrentThread->Tcb.AbAllocationRegionCount;
v6 = ((char)CurrentThread->Tcb.AbEntrySummary | (char)CurrentThread->Tcb.AbOrphanedEntrySummary) ^ 0x3F;
while( 1 )
{
v7 = !_BitScanReverse((unsigned int *)&v8, v6);
if( v7 )
goto LABEL_12;
v9 = &CurrentThread->Tcb.LockEntries[v8];
v6 &= ~(1 << v8);
if( (v9->AcquiredByte & 1) != 0
&& (v9->LockState.$E8276A2CF8B819ED32D1B6FEB35D730A::_bf_0 & 1) == 0
&& (v9->LockState.$E8276A2CF8B819ED32D1B6FEB35D730A::_bf_0 & 0x7FFFFFFFFFFFFFFCi64) == ((unsigned __int64)&LoggerContext->CompressionLock & 0x7FFFFFFFFFFFFFFCi64)
&& v9->LockState.SessionId == SessionId )
{
v9->AcquiredByte &= ~1u;
if( v9->LockState.$E8276A2CF8B819ED32D1B6FEB35D730A::_bf_0 )
break;
}
}
if( !v9 )
{
LABEL_12:
if( (*(&CurrentThread->Tcb.MiscFlags + 1) & 0x10000) == 0 )
KeBugCheckEx(0x162u, CurrentThread, &LoggerContext->CompressionLock, (PVOID)SessionId, 0i64);
goto LABEL_24;
}
v9->CrossThreadReleasableAndBusyByte |= 2u;
if( v9->LockState.$E8276A2CF8B819ED32D1B6FEB35D730A::_bf_0 < 0 )
KiAbEntryRemoveFromTree(v9);
v10 = v9->BoostBitmap.AllFields & 0x1FFFF;
v11 = v9->BoostBitmap.AllFields & 0xFFFE0000;
v9->ThreadLocalFlags &= ~1u;
LODWORD(a3) = v10;
v9->BoostBitmap.AllFields = v11;
v9->LockState.$E8276A2CF8B819ED32D1B6FEB35D730A::_bf_0 = 0i64;
v12 = v9 - CurrentThread->Tcb.LockEntries;
if( v5 == 1 )
CurrentThread->Tcb.AbEntrySummary |= 1 << v12;
else
_InterlockedOr8((volatile signed __int8 *)&CurrentThread->Tcb.AbOrphanedEntrySummary, 1 << v12);
LABEL_24:
--CurrentThread->Tcb.AbAllocationRegionCount;
KiAbThreadRemoveBoosts(&CurrentThread->Tcb, &LoggerContext->CompressionLock, &a3);
v7 = CurrentThread->Tcb.SpecialApcDisable++ == -1;
if( v7
&& ($F25F8C4BA33AF922A5F1AF68CD89DDDF *)CurrentThread->Tcb.ApcState.ApcListHead[0].Flink != &CurrentThread->Tcb.152 )
{
KiCheckForKernelApcDelivery();
}
_InterlockedExchange(&LoggerContext->CompressionOn, 0);
}
CompressionWorkspace = LoggerContext->CompressionWorkspace;
if( CompressionWorkspace )
ExFreePoolWithTag(CompressionWorkspace, 0);
EtwpFreePlaceholderList(LoggerContext);
}Referenced by:
EtwpFreeLoggerContext