MiDelayFaultingThread
NTSTATUS __fastcall MiDelayFaultingThread(INT64 a1){
__int64 v1;
__int64 v2;
LARGE_INTEGER *v3;
v1 = *((_QWORD *)KeGetCurrentThread() + 23);
if( (_DWORD)a1 == 1 )
{
v2 = *(unsigned __int16 *)(v1 + 1838);
v3 = (LARGE_INTEGER *)MiHalfSecond;
return MiWaitForAvailablePages(*(UINT64 **)(qword_140C4E388 + 8 * v2), v3);
}
if( (_DWORD)a1 == 2 )
{
v2 = *(unsigned __int16 *)(v1 + 1838);
v3 = (LARGE_INTEGER *)&Mi30Milliseconds;
return MiWaitForAvailablePages(*(UINT64 **)(qword_140C4E388 + 8 * v2), v3);
}
return KeDelayExecutionThread(0, 0, (PLARGE_INTEGER)&Mi10Milliseconds);
}Referenced by:
MiUserFault