MiMakeTransitionPte
INT64 __fastcall MiMakeTransitionPte(UINT64 a1, UINT64 a2, UINT64 a3){
INT64 v3;
v3 = 32 * (a2 & 0x1F | ((a1 & 0xFFFFFFFFFi64) << 7) | 0x40);
if( qword_140C4DC80 )
{
if( (qword_140C4DC80 & v3) == 0 )
return v3 | qword_140C4DC80;
return v3 | 0x10;
}
return v3;
}Referenced by:
MiBuildForkPageTable
MiClearDriverHotPatchPtes
MiCompletePrivateZeroFault
MiConvertStandbyToProto
MiCreateDecayPfn
MiDecrementAndInsertStandbyPages
MiDeleteParentDecayNode
MiDuplicateCloneLeaf
MiInitializeTransitionPfn
MiInitializeUnusablePfns
MiInsertProtectedStandbyPage
MiMakeOutswappedPageResident
MiMakeProtoTransition
MiMakeVaRangeNoAccess
MiOutPageSingleKernelStack
MiProtectAweRegion
MiSwitchToTransition
MmFreeLoaderBlock
MmMapHotPatchTablePage
MmOutSwapProcess
MmProtectMdlSystemAddress
MmProtectPool