MiKernelStackVaToStackNode
_LIST_ENTRY *__fastcall MiKernelStackVaToStackNode(_LIST_ENTRY *a1){
_QWORD *v2;
unsigned __int64 v3;
_QWORD *v4;
v2 = 0i64;
v3 = (unsigned __int8)ExAcquireSpinLockShared((INT64 *)&stru_140C4DB30 + 446);
v4 = (_QWORD *)*(&stru_140C4DB30 + 445);
while( v4 )
{
if( (unsigned __int64)a1 > v4[3] )
{
v4 = (_QWORD *)v4[1];
}
else
{
if( (unsigned __int64)a1 >= v4[4] )
{
v2 = v4;
break;
}
v4 = (_QWORD *)*v4;
}
}
ExReleaseSpinLockSharedFromDpcLevel((PEX_SPIN_LOCK)&stru_140C4DB30 + 892);
__writecr8(v3);
return(_LIST_ENTRY *)v2;
}Referenced by:
MiInPageSingleKernelStack
MiResolvePageFileFault