MiCheckPageFileMapping

UINT8 __fastcall MiCheckPageFileMapping(_HHIVE *Hive, UINT64 Parent, UINT64 Child){
  unsigned __int64 v4; 
  int(__fastcall *FileWrite)(_HHIVE *, unsigned int, CMP_OFFSET_ARRAY *, unsigned int, unsigned int); 
  UINT8 result; 
  if( !Hive->FileWrite )
    return 0;
  v4 = ExAcquireSpinLockExclusive(&dword_140C4C6C0);
  FileWrite = Hive->FileWrite;
  if( FileWrite && (*(_QWORD *)FileWrite || *((_QWORD *)FileWrite + 2)) )
  {
    ExReleaseSpinLockExclusiveFromDpcLevel((INT64 *)&dword_140C4C6C0);
    result = 77;
  }
  else
  {
    ExReleaseSpinLockExclusiveFromDpcLevel((INT64 *)&dword_140C4C6C0);
    result = 0;
  }
  __writecr8(v4);
  return result;
}

Referenced by: