MmImageSectionPagable
NTSTATUS __stdcall MmImageSectionPagable(_IMAGE_SECTION_HEADER *SectionTableEntry){
NTSTATUS result;
unsigned __int8 v2;
result = 0;
if( *(_DWORD *)SectionTableEntry->Name == 1633969454 )
return 1;
if( *(_DWORD *)SectionTableEntry->Name == 1162297680 )
{
v2 = SectionTableEntry->Name[4];
result = 1;
if( v2 == 75 )
{
if( SectionTableEntry->Name[5] == 68 )
return(unsigned __int8)KdPageDebuggerSection;
}
else if( v2 == 86 && SectionTableEntry->Name[5] == 82 && SectionTableEntry->Name[6] == 70 && (MiFlags & 1) != 0 )
{
return 0;
}
}
return result;
}Referenced by:
MiLockPagableSections
MiSnapDriverRange
MmResetDriverPaging
sub_140A1BFE4