FsRtlTruncateSmallMcb
INT64 __fastcall FsRtlTruncateSmallMcb(INT64 a1, UINT64 *a2, INT64 a3, UINT64 a4){
INT64 result;
__int64 v9;
__int64 v10;
INT64 v11;
KeExitRetpoline();
result = ((__int64)a2 >> 47) + 1;
if( (__int64)a2 >> 47 != -1 && result != 1 )
{
*(_BYTE *)a1 = 0;
*(_QWORD *)(a1 + 32) = a4 >> 8;
v11 = a3;
v9 = __ROL8__(a2, a3);
v10 = __ROR8__(a1, a3);
*(_QWORD *)(a1 + 40) ^= a4;
*(_QWORD *)(a1 + 48) ^= a3;
return KiCustomAccessRoutine0(a2);
}
return result;
}Referenced by:
KiInterruptThunk
__1
__2
__3
__4
__5
__6
__7
__8
__9
__a
__b
__c
__d
__e
__f