VmpFaultEntryRemove
__int64 __fastcall VmpFaultEntryRemove(__int64 a1, _RTL_BALANCED_NODE *a2, unsigned int a3){
_RTL_BALANCED_NODE *v3;
_RTL_BALANCED_NODE *v5;
unsigned __int8 CurrentIrql;
__int64 result;
v3 = a2;
v5 = &a2[2 * a3];
CurrentIrql = KeGetCurrentIrql();
__writecr8(0xFui64);
ExAcquireSpinLockExclusiveAtDpcLevel((INT64 *)(a1 + 64));
while( v3 < v5 )
{
RtlRbRemoveNode((UINT64 *)(a1 + 48), (UINT64)v3);
v3 += 2;
}
ExReleaseSpinLockExclusiveFromDpcLevel((INT64 *)(a1 + 64));
result = CurrentIrql;
__writecr8(CurrentIrql);
return result;
}Referenced by:
VmpAccessFaultBatch