MiVadShouldBeForked
NTSTATUS __stdcall MiVadShouldBeForked(INT64 a1){
int v1;
int v2;
v1 = *(_DWORD *)(a1 + 48);
if( (v1 & 0x500000) != 5242880 )
{
if( (v1 & 0x100000) != 0 && ((v1 & 0x400000) != 0 || (v1 & 0xC0000u) >= 0x80000) )
return 1;
v2 = v1 & 0x70;
if( (v1 & 0x70) == 0 || v2 == 32 || v2 == 80 )
{
if( (v1 & 0x100000) != 0 )
{
if( (v1 & 0x1000000) != 0 || (v1 & 0x2000000) == 0 )
return 1;
}
else if( (*(_DWORD *)(a1 + 64) & 0x4000000) != 0 )
{
return 1;
}
}
}
return 0;
}Referenced by:
MiAllocateChildVads