MiReacquireWalkLocks
INT64 __fastcall MiReacquireWalkLocks(INT64 a1, MMPTE *a2, INT64 a3){
INT64 v3;
int v4;
MMPTE *v7;
INT64 result;
INT64 *v9;
v3 = *(_QWORD *)(a1 + 24);
v4 = a3;
if( !(_DWORD)a3 )
MiLockWorkingSetShared(v3);
v7 = MiLockLowestValidPageTable(
v3,
(INT64 *)((__int64)(((_QWORD)a2 << 25) - ((_QWORD)MmGetPteBase() << 25)) >> 16),
&v9);
if( v7 == a2 )
{
*(_BYTE *)(a1 + 2) &= ~1u;
result = 1i64;
*(_QWORD *)(a1 + 48) = a2;
}
else
{
MiUnlockPageTableInternal(v3, (UINT64)v7);
if( !v4 )
MiUnlockWorkingSetShared(*(_QWORD *)(a1 + 24), *(_BYTE *)(a1 + 6));
return 0i64;
}
return result;
}Referenced by:
MiQueryEPTAccessedState