MiSetProbePagesAhead
CHAR __fastcall MiSetProbePagesAhead(INT64 a1){
__int64 v2;
int v3;
INT64 v4;
char *v5;
unsigned __int64 v6;
unsigned __int64 v7;
__int64 v8;
unsigned __int64 v9;
signed __int64 v10;
_QWORD *v11;
UNICODE_STRING *v12;
unsigned __int64 v13;
unsigned __int64 v14;
unsigned __int64 v15;
UNICODE_STRING *v16;
UINT8 v17;
WCHAR *v18;
wchar_t *Buffer;
__int64 v20;
__int64 v21;
INT64 v23;
LOBYTE(v2) = *(_DWORD *)(a1 + 64) & 0xF;
if( (_BYTE)v2 == 1 )
{
v3 = *(_DWORD *)(a1 + 88);
if( v3 != 3 )
{
v4 = *(_QWORD *)(a1 + 40);
v23 = v4;
v5 = (char *)MmGetPfnDb() + 40;
v6 = 6 * (((unsigned __int64)MI_READ_PTE_LOCK_FREE((INT64)&v23) >> 12) & 0xFFFFFFFFFi64);
LOBYTE(v2) = (_BYTE)v5;
if( ((*(_QWORD *)&v5[8 * v6] >> 50) & 1) != 0 )
{
v7 = *(_QWORD *)(a1 + 16);
v8 = 0i64;
v9 = v4 & 0xF0FF000000000FFFui64;
while( 1 )
{
v7 += 8i64;
if( (v7 & 0xFFF) == 0 )
break;
if( v7 > *(_QWORD *)(a1 + 24) )
break;
v23 = MI_READ_PTE_LOCK_FREE(v7);
LOBYTE(v2) = v23;
if( (v23 & 0xF0FF000000000FFFui64) != v9 )
break;
v10 = 48 * (((unsigned __int64)MI_READ_PTE_LOCK_FREE((INT64)&v23) >> 12) & 0xFFFFFFFFFi64);
LOBYTE(v2) = (_BYTE)v5;
if( ((*(_QWORD *)&v5[v10] >> 50) & 1) == 0 )
break;
v11 = (_QWORD *)qword_140C4EBC0;
v12 = (UNICODE_STRING *)((char *)MmGetPfnDb() + v10);
if( qword_140C4EBC0 && (((unsigned __int64)v12[2].Buffer >> 60) & 7) == 1 )
{
v13 = (__int64)((unsigned __int128)(v10 * (__int128)0x2AAAAAAAAAAAAAABi64) >> 64) >> 3;
v14 = (v13 >> 63) + v13;
while( v11 )
{
v15 = v11[3];
if( v14 < v15 )
{
v11 = (_QWORD *)*v11;
}
else
{
LOBYTE(v2) = v14 - v15;
if( v14 - v15 < v11[4] )
goto LABEL_26;
v11 = (_QWORD *)v11[1];
}
}
}
LODWORD(v2) = MiLegitimatePageForDriversToMap((INT64)v12);
if( (int)v2 < 0 )
break;
if( !v3 )
{
Buffer = v12[2].Buffer;
if( (((unsigned __int64)Buffer >> 60) & 7) != 1 && ((unsigned __int64)Buffer & 0x1000000000i64) == 0 )
{
v2 = (__int64)v12->Buffer;
if( v2 > 0 )
break;
}
LOBYTE(v2) = MI_PFN_IS_PROTO(v12, v16, v17, v18);
if( (_DWORD)v2 )
{
LODWORD(v2) = *(_DWORD *)(a1 + 64);
if( (v2 & 0x10) != 0 )
break;
}
}
++v8;
v5 = (char *)MmGetPfnDb() + 40;
}
LABEL_26:
if( v8 )
{
v20 = *(_QWORD *)(a1 + 16) << 25;
*(_QWORD *)(a1 + 160) = -1i64;
v21 = (v20 - ((_QWORD)MmGetPteBase() << 25)) >> 16;
*(_QWORD *)(a1 + 144) = v21;
v2 = (v8 << 12) + v21 + 4095;
*(_DWORD *)(a1 + 64) |= 0x20u;
*(_QWORD *)(a1 + 152) = v2;
}
}
}
}
return v2;
}Referenced by:
MiProbeAndLockPages
MiProbeLeafFrame