MiProcessCommitIntact
BOOL __stdcall MiProcessCommitIntact(){
__int64 v0;
char v1;
INT64 v2;
BOOL result;
UINT64 v4;
_MMVAD_SHORT *Address;
int v6;
v0 = *((_QWORD *)KeGetCurrentThread() + 23);
v1 = *(_BYTE *)(v0 + 1851);
v2 = v0 + 1664;
result = 1;
if( (v1 & 0x60) == 96 )
{
if( MiGetSharedVm(v2)[4] )
{
if( v4 < 0xFFFF800000000000ui64 )
{
Address = (_MMVAD_SHORT *)MiLocateAddress(v4);
if( !Address )
return 0;
MiIsVadEligibleForCommitRelease(Address);
if( v6 )
return 0;
}
}
}
return result;
}Referenced by:
MiProbeLeafPteAccess
MiSplitReducedCommitClonePage