MiSetProbePagesAhead

CHAR __stdcall MiSetProbePagesAhead(INT64 a1){
  unsigned __int64 v2; 
  int v3; 
  INT64 v4; 
  union {$8D9ED47C9F2F2CD645B633E301950288 __s0;unsigned __int64 EntireField;} *p_u4; 
  __int64 v6; 
  unsigned __int64 v7; 
  __int64 v8; 
  unsigned __int64 v9; 
  INT64 v10; 
  __int64 v11; 
  _QWORD *v12; 
  _UNICODE_STRING *v13; 
  unsigned __int64 v14; 
  unsigned __int64 v15; 
  unsigned __int64 v16; 
  _UNICODE_STRING *v17; 
  UINT8 v18; 
  wchar_t *v19; 
  wchar_t *Buffer; 
  __int64 v21; 
  __int64 v22; 
  INT64 v24; 

  LOBYTE(v2) = *(_DWORD *)(a1 + 64) & 0xF;
  if( (_BYTE)v2 == 1 )
  {
    v3 = *(_DWORD *)(a1 + 88);
    if( v3 != 3 )
    {
      v4 = *(_QWORD *)(a1 + 40);
      v24 = v4;
      LODWORD(v2) = MI_READ_PTE_LOCK_FREE((INT64)&v24);
      p_u4 = &MmGetPfnDb()->u4;
      v6 = 6 * ((v2 >> 12) & 0xFFFFFFFFFi64);
      LOBYTE(v2) = (_BYTE)p_u4;
      if( (((unsigned __int64)p_u4[v6]._bf_0 >> 50) & 1) != 0 )
      {
        v7 = *(_QWORD *)(a1 + 16);
        v8 = 0i64;
        v9 = v4 & 0xF0FF000000000FFFui64;
        while( 1 )
        {
          v7 += 8i64;
          if( (v7 & 0xFFF) == 0 )
            break;
          if( v7 > *(_QWORD *)(a1 + 24) )
            break;
          LODWORD(v10) = MI_READ_PTE_LOCK_FREE(v7);
          v24 = v10;
          v2 = v10 & 0xF0FF000000000FFFui64;
          if( v2 != v9 )
            break;
          LODWORD(v2) = MI_READ_PTE_LOCK_FREE((INT64)&v24);
          v11 = 48 * ((v2 >> 12) & 0xFFFFFFFFFi64);
          LOBYTE(v2) = (_BYTE)p_u4;
          if( (((unsigned __int64)p_u4[(unsigned __int64)v11 / 8]._bf_0 >> 50) & 1) == 0 )
            break;
          v12 = (_QWORD *)*(&stru_140C4DB30 + 530);
          v13 = (_UNICODE_STRING *)&MmGetPfnDb()[(unsigned __int64)v11 / 0x30];
          if( *(&stru_140C4DB30 + 530) && (((unsigned __int64)v13[2].Buffer >> 60) & 7) == 1 )
          {
            v14 = (__int64)((unsigned __int128)(v11 * (__int128)0x2AAAAAAAAAAAAAABi64) >> 64) >> 3;
            v15 = (v14 >> 63) + v14;
            while( v12 )
            {
              v16 = v12[3];
              if( v15 < v16 )
              {
                v12 = (_QWORD *)*v12;
              }
              else
              {
                LOBYTE(v2) = v15 - v16;
                if( v15 - v16 < v12[4] )
                  goto LABEL_26;
                v12 = (_QWORD *)v12[1];
              }
            }
          }
          LODWORD(v2) = MiLegitimatePageForDriversToMap((INT64)v13);
          if( (v2 & 0x80000000) != 0i64 )
            break;
          if( !v3 )
          {
            Buffer = v13[2].Buffer;
            if( (((unsigned __int64)Buffer >> 60) & 7) != 1 && ((unsigned __int64)Buffer & 0x1000000000i64) == 0 )
            {
              v2 = (unsigned __int64)v13->Buffer;
              if( (__int64)v2 > 0 )
                break;
            }
            LOBYTE(v2) = MI_PFN_IS_PROTO(v13, v17, v18, v19);
            if( (_DWORD)v2 )
            {
              LODWORD(v2) = *(_DWORD *)(a1 + 64);
              if( (v2 & 0x10) != 0 )
                break;
            }
          }
          ++v8;
          p_u4 = &MmGetPfnDb()->u4;
        }
LABEL_26:
        if( v8 )
        {
          v21 = *(_QWORD *)(a1 + 16) << 25;
          *(_QWORD *)(a1 + 160) = -1i64;
          v22 = (v21 - ((_QWORD)MmGetPteBase() << 25)) >> 16;
          *(_QWORD *)(a1 + 144) = v22;
          v2 = (v8 << 12) + v22 + 4095;
          *(_DWORD *)(a1 + 64) |= 0x20u;
          *(_QWORD *)(a1 + 152) = v2;
        }
      }
    }
  }
  return v2;
}

Referenced by:

MiProbeAndLockPages
MiProbeLeafFrame