KeForceDetachProcess
VOID __stdcall KeForceDetachProcess(KAPC_STATE *ApcState, INT8 a2){
int v3;
KAPC_STATE *v4;
__int128 v5[3];
v3 = a2 & 1;
v4 = (KAPC_STATE *)v5;
v5[0] = 0i64;
if( ApcState )
v4 = ApcState;
memset(&v5[1], 0, 32);
KiUnstackDetachProcess(v4, (unsigned int)(2 * v3 + 1));
}Referenced by:
MiReAcquireOutSwappedProcessCommit
MiReleaseCommitForResetPages
MiReleaseOutSwappedProcessCommit
MiSharePages
MiTrimSharedPageFromViews
MiUnlockStealVm
MmQueryCommitReleaseState
MmReleaseCommitForMemResetPages
PopHandleNextState