MiHyperPage
INT64 __fastcall MiHyperPage(INT64 a1){
unsigned __int64 PteBase;
unsigned __int64 v2;
unsigned int v3;
unsigned __int64 v4;
int v5;
PteBase = (unsigned __int64)MmGetPteBase();
v2 = PteBase + (((unsigned __int64)qword_140C4F878 >> 9) & 0x7FFFFFFFF8i64);
v3 = 0;
v4 = *(_QWORD *)(a1 + 8) | 0x8000000000000000ui64;
v5 = 0;
while( v4 >= PteBase && v4 <= (unsigned __int64)MmGetPteLimit() )
{
if( v4 >= v2 && v4 <= PteBase + (((unsigned __int64)qword_140C4E0A8 >> 9) & 0x7FFFFFFFF8i64) )
return(unsigned int)(v5 != 0) + 1;
++v5;
v4 = (__int64)((v4 << 25) - (PteBase << 25)) >> 16;
v2 &= 0xFFFFFFFFFFFFF000ui64;
}
return v3;
}Referenced by:
MiActivePageClaimCandidate