KeCopyPrivilegedPage
NTSTATUS __stdcall KeCopyPrivilegedPage(_LARGE_INTEGER *FreezeTimeout, _LARGE_INTEGER *ThawTimeout, INT8 WaitMode){
__int128 *v3;
INT64 v5;
__int128 *v7;
__int128 v8;
__int128 v9;
INT64 v11[14];
INT64 v12;
char v13;
v5 = WaitMode;
v7 = v3;
memset(v11, 0i64, 0x68u);
v8 = *v7;
v11[7] = v12;
v9 = *(_OWORD *)&ThawTimeout->anonymous_0.LowPart;
v11[1] = v5;
LOBYTE(v11[8]) = v13 & 1;
*(_OWORD *)&v11[2] = v8;
v11[4] = (INT64)FreezeTimeout;
*(_OWORD *)&v11[5] = v9;
return VslpEnterIumSecureMode(2u, 244, 0i64, (INT64)v11);
}Referenced by:
MiCopyPage
MiFillPerSessionProtos