MiWalkResetCommitPages
INT64 __fastcall MiWalkResetCommitPages(INT64 a1){
__int64 v2;
unsigned __int64 v3;
INT64 v4;
unsigned __int64 v5;
__int64 v6;
INT64 v8;
_WORD result[3];
UINT8 result_6;
INT64 v11;
unsigned __int64 v12;
__int64 v13;
NTSTATUS(__stdcall *v14)(PKSPIN_LOCK);
INT64 *v15;
v8 = 0i64;
memset((INT64)result, 0i64);
v2 = *(unsigned __int8 *)(a1 + 33);
v3 = (unsigned __int64)*(unsigned __int8 *)(a1 + 32) << 32;
v4 = *((_QWORD *)KeGetCurrentThread() + 23);
v15 = &v8;
v4 += 1664i64;
result[0] = 7;
v14 = MiWalkResetCommitPte;
v5 = *(unsigned int *)(a1 + 24) | v3;
v11 = v4;
v6 = ((*(unsigned int *)(a1 + 28) | (unsigned __int64)(v2 << 32)) << 12) | 0xFFF;
v12 = v5 << 12;
v13 = v6;
result_6 = MiLockWorkingSetShared(v4);
MiWalkPageTables((INT64)result);
MiUnlockWorkingSetShared(v4, result_6);
return v8;
}Referenced by:
MiReleaseCommitForResetPages