ExAcquireSharedWaitForExclusive

NTSTATUS __fastcall ExAcquireSharedWaitForExclusive(UINT64 a1, INT8 a2, INT64 a3){
  bool v3; 
  _SEP_LOGON_SESSION_REFERENCES *CurrentThread; 
  int v7; 
  __int16 v8; 
  _OWNER_ENTRY *v9; 
  _OWNER_ENTRY *v10; 
  __int32 bf_0; 
  int v12; 
  __int64 v13; 
  unsigned int v14; 
  _OWNER_ENTRY *EmptyEntry; 
  _OWNER_ENTRY *v16; 
  unsigned int v17; 
  unsigned int v18; 
  NTSTATUS result; 
  UINT64 v20; 
  UINT64 v21; 
  CHAR v22; 
  unsigned int v23; 
  unsigned int v24; 
  _OWNER_ENTRY *v25; 
  int v26; 
  int v27; 
  PVOID BugCheckParameter4; 
  _KLOCK_QUEUE_HANDLE LockHandle; 
  INT64 Object[2]; 
  __int128 v31; 
  __int128 v32; 

  v3 = (*(_BYTE *)(a1 + 26) & 1) == 0;
  memset(&LockHandle, 0, sizeof(LockHandle));
  *(_OWORD *)Object = 0i64;
  v31 = 0i64;
  v32 = 0i64;
  if( !v3 )
    KeBugCheckEx(0x1C6u, (PVOID)0xE, (PVOID)a1, 0i64, 0i64);
  CurrentThread = (_SEP_LOGON_SESSION_REFERENCES *)KeGetCurrentThread();
  v7 = *(&PerfGlobalGroupMask + 1) & 0x20000;
  __incgsdword(0x86BCu);
  KeAcquireInStackQueuedSpinLock((PKSPIN_LOCK)(a1 + 96), &LockHandle);
  while( *(_DWORD *)(a1 + 64) )
  {
    v8 = *(_WORD *)(a1 + 26) & 0x80;
    if( v8 && *(_SEP_LOGON_SESSION_REFERENCES **)(a1 + 48) == CurrentThread )
    {
      v17 = *(_DWORD *)(a1 + 56) + 8;
      *(_DWORD *)(a1 + 56) = v17;
      v18 = v17 >> 3;
      KeReleaseInStackQueuedSpinLockFromDpcLevel(&LockHandle);
      result = KiIrqlFlags;
      __writecr8(LockHandle.OldIrql);
      __incgsdword(0x86C0u);
      __incgsdword(0x8664u);
      if( v7 )
      {
        v20 = v18;
        v21 = 65585i64;
        goto LABEL_18;
      }
LABEL_19:
      v22 = 1;
      goto LABEL_39;
    }
    if( v8 || *(_DWORD *)(a1 + 76) )
    {
      if( !a2 )
      {
        KeReleaseInStackQueuedSpinLockFromDpcLevel(&LockHandle);
        result = KiIrqlFlags;
        __writecr8(LockHandle.OldIrql);
        __incgsdword(0x86D0u);
        v22 = 0;
        goto LABEL_39;
      }
      if( !v8 )
      {
        v16 = 0i64;
LABEL_28:
        ExpPrepareToWaitForResourceShared(a1, (INT64)CurrentThread, (INT64)Object);
        KeReleaseInStackQueuedSpinLockFromDpcLevel(&LockHandle);
        __writecr8(LockHandle.OldIrql);
        __incgsdword(0x86CCu);
        if( v7 )
          PerfLogExecutiveResourceWait(0x10044ui64, (VOID *)a1, 0i64);
        ExpApplyPrewaitBoost();
        ExpWaitForResource((_ERESOURCE *)a1, Object);
        if( !v16 )
        {
          KeAcquireInStackQueuedSpinLock((PKSPIN_LOCK)(a1 + 96), &LockHandle);
          do
          {
            LODWORD(BugCheckParameter4) = 1;
            v25 = ExpFindCurrentThread(
                    (_ERESOURCE *)a1,
                    (UINT64)CurrentThread,
                    &LockHandle,
                    1ui64,
                    (UINT64)BugCheckParameter4);
          }
          while( !v25 );
          v26 = v25->_bf_0 & 7;
          v25->OwnerThread = (unsigned __int64)CurrentThread;
          v25->_bf_0 = v26 | 8;
          KeReleaseInStackQueuedSpinLockFromDpcLevel(&LockHandle);
          __writecr8(LockHandle.OldIrql);
        }
        ExpBoostIoAfterAcquire((_ERESOURCE *)a1, (UINT64)CurrentThread);
        __incgsdword(0x86C4u);
        __incgsdword(0x8664u);
        if( !v7 )
          goto LABEL_19;
        v20 = 1i64;
        v21 = 65601i64;
LABEL_18:
        PerfLogExecutiveResourceAcquire(v21, (VOID *)a1, v20, *(unsigned int *)(a1 + 68));
        goto LABEL_19;
      }
      EmptyEntry = ExpFindEmptyEntry((_ERESOURCE *)a1, &LockHandle);
      v16 = EmptyEntry;
      if( EmptyEntry )
      {
        EmptyEntry->OwnerThread = (unsigned __int64)CurrentThread;
        EmptyEntry->_bf_0 = EmptyEntry->_bf_0 & 7 | 8;
        goto LABEL_28;
      }
    }
    else
    {
      ExpGetThreadResourceHint(CurrentThread);
      LODWORD(BugCheckParameter4) = 1;
      v9 = ExpFindCurrentThread((_ERESOURCE *)a1, (UINT64)CurrentThread, &LockHandle, 1ui64, (UINT64)BugCheckParameter4);
      v10 = v9;
      if( v9 )
      {
        bf_0 = v9->_bf_0;
        v12 = bf_0 & 7;
        if( v10->OwnerThread )
        {
          v14 = v12 | (bf_0 + 8) & 0xFFFFFFF8;
          v10->_bf_0 = v14;
        }
        else
        {
          v10->OwnerThread = (unsigned __int64)CurrentThread;
          v10->_bf_0 = v12 | 8;
          ExpTryAcquireResourceShared(a1);
          v14 = *(_DWORD *)(v13 + 8);
        }
        v23 = v14 >> 3;
        KeReleaseInStackQueuedSpinLockFromDpcLevel(&LockHandle);
        __writecr8(LockHandle.OldIrql);
        result = 34504;
        v24 = 65617;
        if( v23 == 1 )
          v24 = 65601;
        if( v23 == 1 )
          result = 34500;
        __incgsdword(result);
        __incgsdword(0x86C8u);
        if( !v7 )
          goto LABEL_19;
        v20 = 1i64;
        v21 = v24;
        goto LABEL_18;
      }
    }
  }
  v22 = ExpTryAcquireResourceShared(a1);
  v27 = *(_DWORD *)(a1 + 56) & 7;
  *(_QWORD *)(a1 + 48) = CurrentThread;
  *(_DWORD *)(a1 + 56) = v27 | 8;
  KeReleaseInStackQueuedSpinLockFromDpcLevel(&LockHandle);
  result = KiIrqlFlags;
  __writecr8(LockHandle.OldIrql);
  __incgsdword(0x86C4u);
  __incgsdword(0x8664u);
  if( v7 )
    PerfLogExecutiveResourceAcquire(0x10041ui64, (VOID *)a1, 1ui64, *(unsigned int *)(a1 + 68));
LABEL_39:
  LOBYTE(result) = v22;
  return result;
}

Referenced by: