MiCreateRotateView
NTSTATUS __stdcall MiCreateRotateView(_MMVAD_SHORT *Vad){
_DWORD *Pool;
void *v3;
void *v4;
void *v6;
Pool = MiAllocatePool(64i64, 0x48ui64, 0x77776D4Dui64);
if( Pool )
{
MiGetInPageSupportBlock();
v4 = v3;
if( v3 )
{
if( PsChargeProcessNonPagedPoolQuota(KeGetCurrentThread()->ApcState.Process, 0x208ui64) >= 0 )
{
Pool[16] = 8;
*((_QWORD *)Pool + 1) = v4;
MiInsertVadEvent((__int64)Vad, Pool, 0);
return 1;
}
ExFreePoolWithTag(Pool, 0);
v6 = v4;
}
else
{
v6 = Pool;
}
ExFreePoolWithTag(v6, 0);
}
return 0;
}Referenced by:
MiDeletePartialVad
MiReserveUserMemory