MmIssueMemoryListCommand
NTSTATUS __stdcall MmIssueMemoryListCommand(
VOID *SystemInformation,
UINT64 SystemInformationLength,
_KPROCESSOR_MODE PreviousMode){
_SYSTEM_MEMORY_LIST_COMMAND v3;
if( (unsigned int)SystemInformationLength < 4 )
return -1073741820;
v3 = *(_DWORD *)SystemInformation;
if( *(_DWORD *)SystemInformation > 5u )
return -1073741811;
if( v3 == MemoryFlushModifiedList
|| SeSinglePrivilegeCheck(*(_QWORD *)&SeProfileSingleProcessPrivilege, PreviousMode) )
{
return MmPerformMemoryListCommand(v3);
}
return -1073741727;
}Referenced by:
NtSetSystemInformation
PfpLogEventRequest