MiAdvanceVadView

VOID __fastcall MiAdvanceVadView(_MMVAD *Vad, UINT64 DeltaVpn){
  UINT64 v3; 
  __int64 *v4; 
  __int64 v5; 
  UINT64 v6; 
  unsigned __int64 v7; 
  bool v8; 
  _WORD *SubsectionNode; 
  __int64 v10; 
  unsigned __int64 v11; 
  unsigned __int64 v12; 
  __int64 v13; 
  __int64 v14; 
  unsigned __int64 v15; 
  v3 = DeltaVpn + (*((unsigned int *)Vad + 6) | ((unsigned __int64)*((unsigned __int8 *)Vad + 32) << 32));
  if( (*((_DWORD *)Vad + 12) & 0x100000) == 0 )
  {
    v4 = (__int64 *)*((_QWORD *)Vad + 9);
    v5 = *v4;
    v6 = (DeltaVpn << 12) + MiStartingOffset((__int64)v4, *((_QWORD *)Vad + 10), 0xFFFFFFFF);
    v7 = v6 >> 12;
    v8 = *(_QWORD *)(v5 + 64) == 0i64;
    v15 = v6 >> 12;
    if( v8 )
    {
      SubsectionNode = MiLocatePagefileSubsection((unsigned int *)(v5 + 128), &v15);
      v7 = v15;
    }
    else
    {
      SubsectionNode = MiLocateSubsectionNode((_CONTROL_AREA *)v5, v6, 0i64);
    }
    v10 = (__int64)SubsectionNode;
    v11 = (unsigned __int64)*((unsigned __int8 *)Vad + 33) << 32;
    v12 = v7 - (*((unsigned int *)SubsectionNode + 9) | ((unsigned __int64)(SubsectionNode[16] & 0xFFC0) << 26));
    *((_QWORD *)Vad + 9) = SubsectionNode;
    v13 = *((_QWORD *)SubsectionNode + 1) + 8 * v12;
    v14 = *((unsigned int *)Vad + 7);
    *((_QWORD *)Vad + 10) = v13;
    *((_QWORD *)Vad + 11) = MiComputeContiguousSubsectionPte(v10, v12 + (v14 | v11) - v3);
  }
  *((_DWORD *)Vad + 6) = v3;
  *((_BYTE *)Vad + 32) = BYTE4(v3);
}

Referenced by:

MiDeletePartialVad