ExQueryHandleExceptionsPermanency
VOID __stdcall ExQueryHandleExceptionsPermanency(
_HANDLE_TABLE *HandleTable,
UINT8 *HandleExceptionsOn,
UINT8 *HandleExceptionsPermanent){
_ETHREAD *CurrentThread;
unsigned __int64 p_HandleTableLock;
_HANDLE_TRACE_DEBUG_INFO *DebugInfo;
_ETHREAD *v9;
unsigned int SessionId;
unsigned __int8 v11;
int v12;
bool v13;
__int64 v14;
_KLOCK_ENTRY *v15;
__int64 v16;
UINT64 a3;
CurrentThread = (_ETHREAD *)KeGetCurrentThread();
--CurrentThread->Tcb.KernelApcDisable;
p_HandleTableLock = (unsigned __int64)&HandleTable->HandleTableLock;
ExAcquirePushLockExclusiveEx(&HandleTable->HandleTableLock, 0i64);
DebugInfo = HandleTable->DebugInfo;
if( DebugInfo )
{
*HandleExceptionsOn = 1;
LOBYTE(DebugInfo) = (DebugInfo->BitMaskFlags & 8) != 0;
}
else if( (HandleTable->Flags & 2) != 0 )
{
*HandleExceptionsOn = 1;
LOBYTE(DebugInfo) = 1;
}
else
{
*HandleExceptionsOn = 0;
}
*HandleExceptionsPermanent = (unsigned __int8)DebugInfo;
if( (_InterlockedExchangeAdd64((volatile signed __int64 *)p_HandleTableLock, 0xFFFFFFFFFFFFFFFFui64) & 6) == 2 )
ExfTryToWakePushLock((_EX_PUSH_LOCK *)p_HandleTableLock);
LODWORD(a3) = 0;
v9 = (_ETHREAD *)KeGetCurrentThread();
if( MiGetSystemRegionType(p_HandleTableLock) == 1 )
SessionId = MmGetSessionIdEx(v9->Tcb.ApcState.Process);
else
SessionId = -1;
--v9->Tcb.SpecialApcDisable;
v11 = ++v9->Tcb.AbAllocationRegionCount;
v12 = ((char)v9->Tcb.AbEntrySummary | (char)v9->Tcb.AbOrphanedEntrySummary) ^ 0x3F;
while( 1 )
{
v13 = !_BitScanReverse((unsigned int *)&v14, v12);
if( v13 )
break;
v15 = &v9->Tcb.LockEntries[v14];
v12 &= ~(1 << v14);
if( (v15->AcquiredByte & 1) != 0
&& (v15->LockState.$E8276A2CF8B819ED32D1B6FEB35D730A::_bf_0 & 1) == 0
&& (v15->LockState.$E8276A2CF8B819ED32D1B6FEB35D730A::_bf_0 & 0x7FFFFFFFFFFFFFFCi64) == (p_HandleTableLock & 0x7FFFFFFFFFFFFFFCi64)
&& v15->LockState.SessionId == SessionId )
{
v15->AcquiredByte &= ~1u;
if( v15->LockState.$E8276A2CF8B819ED32D1B6FEB35D730A::_bf_0 )
{
if( v15 )
{
v15->CrossThreadReleasableAndBusyByte |= 2u;
if( v15->LockState.$E8276A2CF8B819ED32D1B6FEB35D730A::_bf_0 < 0 )
KiAbEntryRemoveFromTree(v15);
LODWORD(a3) = v15->BoostBitmap.AllFields & 0x1FFFF;
v15->BoostBitmap.AllFields &= 0xFFFE0000;
v15->ThreadLocalFlags &= ~1u;
v15->LockState.$E8276A2CF8B819ED32D1B6FEB35D730A::_bf_0 = 0i64;
v16 = v15 - v9->Tcb.LockEntries;
if( v11 == 1 )
v9->Tcb.AbEntrySummary |= 1 << v16;
else
_InterlockedOr8((volatile signed __int8 *)&v9->Tcb.AbOrphanedEntrySummary, 1 << v16);
goto LABEL_20;
}
break;
}
}
}
if( (*(&v9->Tcb.MiscFlags + 1) & 0x10000) == 0 )
KeBugCheckEx(0x162u, v9, (PVOID)p_HandleTableLock, (PVOID)SessionId, 0i64);
LABEL_20:
--v9->Tcb.AbAllocationRegionCount;
KiAbThreadRemoveBoosts(&v9->Tcb, (VOID *)p_HandleTableLock, &a3);
v13 = v9->Tcb.SpecialApcDisable++ == -1;
if( v13 && ($F25F8C4BA33AF922A5F1AF68CD89DDDF *)v9->Tcb.ApcState.ApcListHead[0].Flink != &v9->Tcb.152 )
KiCheckForKernelApcDelivery();
KeLeaveCriticalRegionThread(&CurrentThread->Tcb);
}Referenced by:
NtClose
NtQueryInformationProcess
ObpCloseHandle