MmTryIdentifyPage
VOID __stdcall MmTryIdentifyPage(UINT64 PageFrameIndex, _MMPFN_IDENTITY *Identity){
char *v2;
unsigned __int8 CurrentIrql;
INT64 v4;
UINT64 *v5;
*(_OWORD *)&Identity->u1.e1 = 0i64;
Identity->u2.FileObject = 0i64;
v2 = (char *)MmGetPfnDb() + 48 * PageFrameIndex;
CurrentIrql = KeGetCurrentIrql();
__writecr8(2ui64);
if( !_interlockedbittestandset64((volatile signed __int32 *)v2 + 6, 0x3Fui64) )
{
if( (v2[35] & 0x40) == 0 && !MiIsPageOnBadList((INT64)v2) && !MiIsPageSecured(v4) )
MiIdentifyPfn((_MMPFN *)v2, v5);
_InterlockedAnd64((volatile signed __int64 *)v2 + 3, 0x7FFFFFFFFFFFFFFFui64);
}
__writecr8(CurrentIrql);
}Referenced by:
IopLiveDumpMirrorPhysicalMemoryCallback