MiGetPagePrivilege

NTSTATUS __stdcall MiGetPagePrivilege(
        ULONG_PTR Pfn1,
        UINT64 PageLockHeld,
        _KE_PRIVILEGED_PAGE_IDENTITY *PrivilegedIdentity){
  int v4; 
  __int64 v5; 
  int v6; 
  wchar_t *v7; 
  unsigned __int64 v8; 
  int v9; 
  UINT64 *v10; 
  _MMPFN *v11; 
  __int64 v12; 
  unsigned int v13; 
  NTSTATUS v14; 
  NTSTATUS result; 
  NTSTATUS v16; 
  unsigned __int64 v17; 
  UINT8 v18; 
  _MMPFN *TopLevelPfn; 
  unsigned __int64 v20; 
  unsigned __int64 v21; 
  int v22; 
  __int64 v23; 
  __int64 v24; 
  __int64 v25; 
  unsigned __int64 v26; 
  int v27; 
  unsigned __int64 v28; 
  int v29; 
  NTSTATUS v30; 
  int v31; 

  v4 = PageLockHeld;
  v5 = *(_QWORD *)&Pfn1;
  if( (MiFlags & 0x2000) == 0 )
    return 0;
  if( ((*(_QWORD *)(*(_QWORD *)&Pfn1 + 40i64) >> 60) & 7) != 3 )
    return 0;
  LOBYTE(v6) = MiIsPfnFileOnly(*(INT64 *)&Pfn1);
  if( v6 )
    return 0;
  if( PrivilegedIdentity && ((unsigned __int16)v7 & 0x8000) == 0 )
    PrivilegedIdentity = 0i64;
  v8 = *(_QWORD *)(v5 + 8) | 0x8000000000000000ui64;
  LOBYTE(v9) = MI_PFN_IS_PROTO((_UNICODE_STRING *)v5, *(_UNICODE_STRING **)(v5 + 8), 0, v7);
  if( v9 )
  {
    v21 = *(_QWORD *)(v5 + 16);
    if( (v21 & 0x400) == 0 )
    {
      v22 = 16 * ((v13 >> 18) & 1);
      if( PrivilegedIdentity )
      {
        *(_QWORD *)PrivilegedIdentity = v12;
        *((_QWORD *)PrivilegedIdentity + 1) = v12;
      }
      return v22 + 3;
    }
    v23 = *(_QWORD *)(v5 + 16);
    if( *(&stru_140C4DB30 + 42) && (v21 & 0x10) == 0 )
      v23 = ~*(&stru_140C4DB30 + 42) & v21;
    v24 = v23 >> 16;
    v25 = *(_QWORD *)v24;
    if( (*(_DWORD *)(*(_QWORD *)v24 + 56i64) & 0x20) == 0 )
      return 2;
    v26 = *(_QWORD *)(v24 + 8);
    if( v8 >= v26 && v8 < v26 + 8i64 * *(unsigned int *)(v24 + 44) )
    {
      v27 = *(_DWORD *)(v25 + 92);
      if( (v27 & 0xC0000) != 0 && (v27 & 0x20000) != 0 && v24 != v25 + 128 )
        return 40;
      v28 = v21 >> 5;
      v29 = v27 & 0xC0000;
      if( (v13 & 0x40000) != 0 )
      {
        v30 = 2;
        if( v29 )
        {
          v30 = 10;
          if( (v28 & 2) != 0 )
            v30 = 11;
        }
LABEL_53:
        if( PrivilegedIdentity )
        {
          *((_QWORD *)PrivilegedIdentity + 1) = *(_QWORD *)(*(_QWORD *)(v25 + 96) + 56i64);
          *(_QWORD *)PrivilegedIdentity = (__int64)(v8 - *(_QWORD *)(v25 + 136)) >> 3 << 12;
        }
        return v30;
      }
      if( v29 )
      {
        v31 = 8;
        if( (v28 & 2) != 0 )
          v31 = 11;
        v30 = v31;
        goto LABEL_53;
      }
    }
    return 0;
  }
  if( (v13 & 0x40000) != 0 )
  {
    v14 = 17;
    if( (unsigned __int64)((__int64)((v8 << 25) - ((_QWORD)MmGetPteBase() << 25)) >> 16) < 0xFFFF800000000000ui64 )
      return 2;
    return v14;
  }
  else
  {
    if( v10 )
    {
      v17 = (__int64)((v8 << 25) - ((_QWORD)MmGetPteBase() << 25)) >> 16;
      if( v17 < 0xFFFF800000000000ui64 )
      {
        v16 = 20;
        if( PrivilegedIdentity )
        {
          if( v4 )
            v18 = 17;
          else
            v18 = MiLockPageInline(v11);
          TopLevelPfn = MiGetTopLevelPfn((_MMPFN *)v5, v10);
          v20 = ((unsigned __int64)TopLevelPfn->u1.$976DF529DAC3D73085C9E386D94B91E6::$E228DCF3D8940E384DBC5EFCA756D8B6::_bf_0 >> 13) & 0x7FFFFFFFFFF0i64 | 0xFFFF800000000000ui64;
          _InterlockedAnd64(&TopLevelPfn->u2.Lock, 0x7FFFFFFFFFFFFFFFui64);
          if( !v4 )
          {
            _InterlockedAnd64((volatile signed __int64 *)(v5 + 24), 0x7FFFFFFFFFFFFFFFui64);
            __writecr8(v18);
          }
          if( *(_QWORD *)(v20 + 992) )
          {
            *(_QWORD *)PrivilegedIdentity = v17;
            *((_QWORD *)PrivilegedIdentity + 1) = *(_QWORD *)(v20 + 992);
          }
          else
          {
            return 0;
          }
        }
      }
      else
      {
        v16 = 1;
        if( (((unsigned __int8)*(_DWORD *)(v5 + 16) >> 5) & 2) == 0 )
          v16 = 64;
        if( PrivilegedIdentity )
        {
          result = v16;
          *(_QWORD *)PrivilegedIdentity = v17;
          *((_QWORD *)PrivilegedIdentity + 1) = v12;
          return result;
        }
      }
    }
    else
    {
      v16 = 4;
      if( PrivilegedIdentity )
      {
        result = 4;
        *(_QWORD *)PrivilegedIdentity = v12;
        *((_QWORD *)PrivilegedIdentity + 1) = v12;
        return result;
      }
    }
    return v16;
  }
}

Referenced by: