KiSwInterrupt
VOID __stdcall KiSwInterrupt(UINT64 a1, UINT64 a2, UINT64 a3, UINT64 a4, CHAR a5){
unsigned __int64 v5;
unsigned __int64 v6;
unsigned __int64 v7;
_M128A v8;
_M128A v9;
_M128A v10;
_M128A v11;
_M128A v12;
_M128A v13;
_KTRAP_FRAME *__shifted(_KTRAP_FRAME,0x80) TrapFrame;
_ETHREAD *CurrentThread;
unsigned __int8 BpbKernelSpecCtrl;
unsigned __int8 BpbState;
bool v18;
unsigned __int8 CurrentIrql;
struct _KPRCB *CurrentPrcb;
_ETHREAD *v21;
UINT64 v22;
__int64 CurrentRunTime;
UINT64 v24;
int v25;
INT64 v26;
INT64 v27;
INT64 v28;
struct _KPRCB *v29;
unsigned __int64 v30;
UINT64 v31;
_ETHREAD *v32;
_ETHREAD *v33;
INT64 R9;
INT64 R8;
unsigned __int8 BpbUserSpecCtrl;
unsigned __int8 v37;
CHAR v40;
void *retaddr;
__int16 v42;
int v43;
void *v44;
__int16 v45;
TrapFrame = KeGetTrapFrame();
ADJ(TrapFrame)->ExceptionActive = 0;
ADJ(TrapFrame)->_Rax = v5;
ADJ(TrapFrame)->_Rcx = a1;
ADJ(TrapFrame)->_Rdx = a2;
ADJ(TrapFrame)->_R8 = a3;
ADJ(TrapFrame)->_R9 = a4;
ADJ(TrapFrame)->_R10 = v6;
ADJ(TrapFrame)->_R11 = v7;
if( (ADJ(TrapFrame)->SegCs & 1) != 0 )
{
if( (KiKvaShadow & 1) == 0 )
__swapgs();
_mm_lfence();
CurrentThread = (_ETHREAD *)KeGetCurrentThread();
__writegsqword(0x270u, CurrentThread->Tcb.Process->SecurityDomain);
__writegsbyte(0x851u, KeGetPcr()->Prcb.BpbRetpolineExitSpecCtrl);
__writegsbyte(0x852u, KeGetPcr()->Prcb.BpbState);
BpbKernelSpecCtrl = KeGetPcr()->Prcb.BpbKernelSpecCtrl;
if( KeGetPcr()->Prcb.BpbCurrentSpecCtrl != BpbKernelSpecCtrl )
{
__writegsbyte(0x27Au, BpbKernelSpecCtrl);
__writemsr(0x48u, BpbKernelSpecCtrl);
}
BpbState = KeGetPcr()->Prcb.BpbState;
if( (BpbState & 8) != 0 )
{
__writemsr(0x49u, 1ui64);
BpbState = KeGetPcr()->Prcb.BpbState;
}
if( (BpbState & 2) != 0 )
__flush_rsb();
_mm_lfence();
__writegsbyte(0x853u, 0);
v18 = (CurrentThread->Tcb.gap0[3] & 3) == 0;
LOWORD(ADJ(TrapFrame)->Dr7) = 0;
if( !v18 )
KiSaveDebugRegisterState();
}
else
{
_mm_lfence();
if( (KeGetPcr()->Prcb.BpbState & 1) != 0 )
__writemsr(0x48u, KeGetPcr()->Prcb.BpbCurrentSpecCtrl);
else
_mm_lfence();
}
ADJ(TrapFrame)->_MxCsr = _mm_getcsr();
_mm_setcsr(KeGetPcr()->Prcb._MxCsr);
ADJ(TrapFrame)->_Xmm0 = v8;
ADJ(TrapFrame)->_Xmm1 = v9;
ADJ(TrapFrame)->_Xmm2 = v10;
ADJ(TrapFrame)->_Xmm3 = v11;
ADJ(TrapFrame)->_Xmm4 = v12;
ADJ(TrapFrame)->_Xmm5 = v13;
if( KeGetPcr()->Prcb.DeepSleep )
KeWakeProcessor();
if( (unsigned __int64)&ExpInterlockedPopEntrySListResume < ADJ(TrapFrame)->_Rip
&& (unsigned __int64)&ExpInterlockedPopEntrySListEnd >= ADJ(TrapFrame)->_Rip )
{
KiCheckForSListAddress(ADJ(TrapFrame));
}
__incgsdword(0x8000u);
if( (_BYTE)KeSmapEnabled )
__clac();
CurrentIrql = KeGetCurrentIrql();
__writecr8(2ui64);
ADJ(TrapFrame)->PreviousIrql = CurrentIrql;
CurrentPrcb = KeGetCurrentPrcb();
if( ++CurrentPrcb->NestingLevel == 1 )
{
v21 = CurrentPrcb->CurrentThread;
v22 = __rdtsc() - CurrentPrcb->StartCycles;
v21->Tcb.CycleTime += v22;
CurrentRunTime = v21->Tcb.CurrentRunTime;
CurrentPrcb->StartCycles += v22;
v24 = v22 + CurrentRunTime;
v25 = v24;
if( HIDWORD(v24) )
v25 = -1;
v21->Tcb.CurrentRunTime = v25;
if( (v21->Tcb.gap0[2] & 0x3E) != 0 )
KiEndThreadAccountingPeriod(KeGetCurrentPrcb(), &v21->Tcb, v22);
}
_enable();
KiSwInterruptDispatch((INT64)ADJ(TrapFrame));
_disable();
HalPerformEndOfInterrupt(0i64);
v29 = KeGetCurrentPrcb();
if( v29->NestingLevel <= 1u )
{
v30 = __rdtsc();
v26 = (unsigned __int64)HIDWORD(v30) << 32;
v31 = (v26 | (unsigned int)v30) - v29->StartCycles;
v29->CycleTime += v31;
v29->StartCycles += v31;
v27 = v31;
if( (v29->CurrentThread->Tcb.gap0[2] & 0x72) != 0 )
{
KiBeginThreadAccountingPeriod(v29, 0i64, v31);
v29 = KeGetCurrentPrcb();
++v29->NestingLevel;
}
LOBYTE(v26) = v29->InterruptRequest;
v29->InterruptRequest = 0;
if( !v29->IdleHalt )
{
if( (_BYTE)v26 )
{
if( ADJ(TrapFrame)->PreviousIrql < 2u )
{
v29->NestingLevel = 0;
KiDpcInterruptBypass();
goto LABEL_36;
}
HalRequestSoftwareInterrupt(2ui64);
v29 = KeGetCurrentPrcb();
}
}
}
--v29->NestingLevel;
LABEL_36:
__writecr8(ADJ(TrapFrame)->PreviousIrql);
_disable();
if( (ADJ(TrapFrame)->SegCs & 1) == 0 )
{
_mm_setcsr(ADJ(TrapFrame)->_MxCsr);
__iretq(retaddr, v42, v43, v44, v45);
}
if( (_BYTE)KeSmapEnabled )
__stac();
while( (KeGetCurrentThread()->ApcState.UserApcPendingAll & 3) != 0 )
{
__writecr8(1ui64);
_enable();
KiInitiateUserApc((_KTRAP_FRAME *)1);
_disable();
__writecr8(0i64);
}
if( (*((_BYTE *)&KeGetPcr()->Prcb.2 + 14) & 2) != 0 )
KiUpdateStibpPairing(0i64);
v32 = (_ETHREAD *)KeGetCurrentThread();
if( (*(_DWORD *)v32->Tcb.gap0 & 0x8000000) != 0 )
KiRestoreSetContextState((INT64)v32, v26, v27, v28, v40);
v33 = (_ETHREAD *)KeGetCurrentThread();
if( (*(_DWORD *)v33->Tcb.gap0 & 0x40010000) != 0 && (v33->Tcb.gap0[2] & 1) != 0 )
KiCopyCounters(&v33->Tcb);
_mm_setcsr(ADJ(TrapFrame)->_MxCsr);
if( LOWORD(ADJ(TrapFrame)->Dr7) )
KiRestoreDebugRegisterState();
R9 = ADJ(TrapFrame)->_R9;
R8 = ADJ(TrapFrame)->_R8;
__writegsbyte(0x853u, 0);
BpbUserSpecCtrl = KeGetPcr()->Prcb.BpbUserSpecCtrl;
if( KeGetPcr()->Prcb.BpbCurrentSpecCtrl != BpbUserSpecCtrl )
{
__writegsbyte(0x27Au, BpbUserSpecCtrl);
__writemsr(0x48u, BpbUserSpecCtrl);
}
v37 = _bittestandreset16(MK_FP(__GS__, 632i64), 2u);
if( v37 )
__writemsr(0x49u, 1ui64);
v37 = _bittestandreset16(MK_FP(__GS__, 632i64), 5u);
if( v37 )
__flush_rsb();
if( (KiKvaShadow & 1) == 0 )
{
__swapgs();
__iretq(retaddr, v42, v43, v44, v45);
}
KiKernelExit(ADJ(TrapFrame)->_Rcx, ADJ(TrapFrame)->_Rdx, R8, R9, a5);
}Referenced by:
KiSwInterruptShadow