MiAdvanceVadView
VOID __fastcall MiAdvanceVadView(_MMVAD *Vad, UINT64 DeltaVpn){
UINT64 v3;
__int64 *v4;
__int64 v5;
UINT64 v6;
unsigned __int64 v7;
bool v8;
_WORD *SubsectionNode;
__int64 v10;
unsigned __int64 v11;
unsigned __int64 v12;
__int64 v13;
__int64 v14;
unsigned __int64 v15;
v3 = DeltaVpn + (*((unsigned int *)Vad + 6) | ((unsigned __int64)*((unsigned __int8 *)Vad + 32) << 32));
if( (*((_DWORD *)Vad + 12) & 0x100000) == 0 )
{
v4 = (__int64 *)*((_QWORD *)Vad + 9);
v5 = *v4;
v6 = (DeltaVpn << 12) + MiStartingOffset((__int64)v4, *((_QWORD *)Vad + 10), 0xFFFFFFFF);
v7 = v6 >> 12;
v8 = *(_QWORD *)(v5 + 64) == 0i64;
v15 = v6 >> 12;
if( v8 )
{
SubsectionNode = MiLocatePagefileSubsection((unsigned int *)(v5 + 128), &v15);
v7 = v15;
}
else
{
SubsectionNode = MiLocateSubsectionNode((_CONTROL_AREA *)v5, v6, 0i64);
}
v10 = (__int64)SubsectionNode;
v11 = (unsigned __int64)*((unsigned __int8 *)Vad + 33) << 32;
v12 = v7 - (*((unsigned int *)SubsectionNode + 9) | ((unsigned __int64)(SubsectionNode[16] & 0xFFC0) << 26));
*((_QWORD *)Vad + 9) = SubsectionNode;
v13 = *((_QWORD *)SubsectionNode + 1) + 8 * v12;
v14 = *((unsigned int *)Vad + 7);
*((_QWORD *)Vad + 10) = v13;
*((_QWORD *)Vad + 11) = MiComputeContiguousSubsectionPte(v10, v12 + (v14 | v11) - v3);
}
*((_DWORD *)Vad + 6) = v3;
*((_BYTE *)Vad + 32) = BYTE4(v3);
}Referenced by:
MiDeletePartialVad