MiInitializeColorBase
UINT64 *__fastcall MiInitializeColorBase(UINT64 a1, INT64 a2, INT64 a3){
unsigned int v4;
__int64 SessionVm;
v4 = a2;
if( (unsigned int)MiGetSystemRegionType(a1) == 1 )
{
SessionVm = MiGetSessionVm();
}
else if( a1 > 0x7FFFFFFEFFFFi64
&& (a1 < qword_140C4F878 || a1 > qword_140C4E0A8)
&& (a1 < (unsigned __int64)MmGetPteBase() || a1 > (unsigned __int64)MmGetPteLimit()) )
{
SessionVm = 0i64;
}
else
{
SessionVm = *((_QWORD *)KeGetCurrentThread() + 23) + 1664i64;
}
return MiInitializePageColorBase(SessionVm, v4, a3);
}Referenced by:
MiDemoteValidLargePageOneLevel
MiMakeZeroedPageTablesEx
MmCreateShadowMapping