MiVaIsPageFileHash
_MMPAGING_FILE *__stdcall MiVaIsPageFileHash(VOID *Va){
unsigned __int64 v1;
unsigned int v2;
int v3;
_MMPAGING_FILE **i;
unsigned int *PageHash;
v2 = *((_DWORD *)Va + 1734);
v3 = 0;
if( !v2 )
return 0i64;
for( i = (_MMPAGING_FILE **)((char *)Va + 6944); ; ++i )
{
PageHash = (*i)->PageHash;
if( PageHash )
{
if( v1 >= (unsigned __int64)PageHash && v1 < (unsigned __int64)&PageHash[(*i)->MaximumSize] )
break;
}
if( ++v3 >= v2 )
return 0i64;
}
return *i;
}Referenced by:
MiActivePageClaimCandidate
MiLockStealSystemVm