NtFreeVirtualMemory

NTSTATUS __stdcall NtFreeVirtualMemory(VOID *ProcessHandle, VOID **BaseAddress, UINT64 *RegionSize, UINT64 FreeType){
  char PreviousMode; 
  __int64 v8; 
  __int64 v9; 
  NTSTATUS result; 
  INT64 v11; 
  INT64 v12; 
  __int64 v13[3]; 

  v13[0] = 0i64;
  v12 = 0i64;
  PreviousMode = KeGetCurrentThread()->PreviousMode;
  if( PreviousMode )
  {
    v8 = (__int64)BaseAddress;
    if( (unsigned __int64)BaseAddress >= 0x7FFFFFFF0000i64 )
      v8 = 0x7FFFFFFF0000i64;
    *(_QWORD *)v8 = *(_QWORD *)v8;
    v9 = (__int64)RegionSize;
    if( (unsigned __int64)RegionSize >= 0x7FFFFFFF0000i64 )
      v9 = 0x7FFFFFFF0000i64;
    *(_QWORD *)v9 = *(_QWORD *)v9;
  }
  v13[0] = (__int64)*BaseAddress;
  v12 = *RegionSize;
  LODWORD(v11) = 0;
  result = MmFreeVirtualMemory((INT64)ProcessHandle, (UINT64 *)v13, &v12, FreeType, PreviousMode, v11);
  if( result >= 0 )
  {
    *RegionSize = v12;
    *BaseAddress = (VOID *)v13[0];
  }
  return result;
}

Referenced by: