MiStackTheftFreezeProcessors

NTSTATUS __stdcall MiStackTheftFreezeProcessors(PVOID Context){
  volatile signed __int64 *v2; 
  unsigned __int8 CurrentIrql; 
  int ActiveProcessorCount; 
  NTSTATUS result; 
  v2 = (volatile signed __int64 *)((char *)MmGetPfnDb() + 48 * *((_QWORD *)Context + 1));
  MiLockNestedPageAtDpcInline((INT64)v2);
  CurrentIrql = KeGetCurrentIrql();
  __writecr8(0xCui64);
  ActiveProcessorCount = KeQueryActiveProcessorCountEx(0xFFFFu);
  *((_DWORD *)Context + 19) = ActiveProcessorCount;
  *((_DWORD *)Context + 18) = ActiveProcessorCount;
  KeIpiGenericCall((PKIPI_BROADCAST_WORKER)MiStackTheftIsr, Context);
  __writecr8(CurrentIrql);
  result = -1;
  _InterlockedAnd64(v2 + 3, 0x7FFFFFFFFFFFFFFFui64);
  return result;
}

Referenced by:

MiJumpStackTarget