HvpCopyModifiedData
VOID __fastcall HvpCopyModifiedData(UINT64 P2, INT64 a2, INT64 a3, UINT64 a4){
unsigned int v4;
int v6;
unsigned int i;
_QWORD *CellMap;
unsigned int v10;
if( (_DWORD)a4 )
{
v4 = a4;
v6 = a2;
for( i = 0; i < v4; i += 4096 )
{
CellMap = (_QWORD *)HvpGetCellMap(P2, i + v6);
if( !CellMap )
KeBugCheckEx(0x51u, 1ui64, P2, v10, 0xC24ui64);
memmove((UINT8 *)(*CellMap + (CellMap[1] & 0xFFFFFFFFFFFFFFF0ui64)), (UINT8 *)(a3 + i), 0x1000ui64);
}
}
}Referenced by:
HvpApplyLogEntryDataToFileBackedHive