MiHashIsCommon
NTSTATUS __stdcall MiHashIsCommon(_MI_COMBINE_CONTROL_BLOCK *CombineControlBlock, UINT64 HashValue){
VOID *v2;
_QWORD *v3;
VOID *v4;
unsigned int v5;
__int64 v6;
__int64 v8;
v3 = (_QWORD *)*((_QWORD *)CombineControlBlock + 5);
v4 = v2;
v5 = CombineControlBlock[14];
v6 = 0i64;
if( !v5 )
return 0;
while( HashValue != *v3 )
{
v6 = (unsigned int)(v6 + 1);
++v3;
if( (unsigned int)v6 >= v5 )
return 0;
}
if( !v4 )
return 1;
LODWORD(v8) = RtlCompareMemoryUlong(v4, 4096, *(unsigned int *)(*((_QWORD *)CombineControlBlock + 6) + 4 * v6));
return v8 == 4096;
}Referenced by:
MiCapturePfnVm
MiPerformCombineScan
MiSharePages