MiStackTheftFreezeProcessors
NTSTATUS __stdcall MiStackTheftFreezeProcessors(PVOID Context){
volatile signed __int64 *v2;
unsigned __int8 CurrentIrql;
int ActiveProcessorCount;
NTSTATUS result;
v2 = (volatile signed __int64 *)((char *)MmGetPfnDb() + 48 * *((_QWORD *)Context + 1));
MiLockNestedPageAtDpcInline((INT64)v2);
CurrentIrql = KeGetCurrentIrql();
__writecr8(0xCui64);
ActiveProcessorCount = KeQueryActiveProcessorCountEx(0xFFFFu);
*((_DWORD *)Context + 19) = ActiveProcessorCount;
*((_DWORD *)Context + 18) = ActiveProcessorCount;
KeIpiGenericCall((PKIPI_BROADCAST_WORKER)MiStackTheftIsr, Context);
__writecr8(CurrentIrql);
result = -1;
_InterlockedAnd64(v2 + 3, 0x7FFFFFFFFFFFFFFFui64);
return result;
}Referenced by:
MiJumpStackTarget