MiFreePhysicalView
VOID __stdcall MiFreePhysicalView(_EPROCESS *Process, _MMVAD_SHORT *Vad){
_MMWSL_INSTANCE *VmWorkingSetList;
_MMSUPPORT_FULL *p_Vm;
_MMSUPPORT_SHARED *SharedVm;
UINT8 v5;
if( (Vad->u.LongFlags & 0x70) == 16 )
{
VmWorkingSetList = Process->Vm.Instance.VmWorkingSetList;
p_Vm = &Process->Vm;
SharedVm = MiGetSharedVm(&Process->Vm.Instance);
v5 = ExAcquireSpinLockExclusive((INT64 *)&SharedVm->WorkingSetLock);
SharedVm->GoodCitizenWaiting = 0;
--*(_QWORD *)&VmWorkingSetList[7].LastAccessClearingRemainder;
MiUnlockWorkingSetExclusive(&p_Vm->Instance, v5);
}
}Referenced by:
MiReleaseVadEventBlocks