MmMapViewOfSection

NTSTATUS __stdcall MmMapViewOfSection(
        VOID *SectionToMap,
        _EPROCESS *Process,
        VOID **CapturedBase,
        UINT64 ZeroBits,
        UINT64 CommitSize,
        _LARGE_INTEGER *SectionOffset,
        UINT64 *CapturedViewSize,
        _SECTION_INHERIT InheritDisposition,
        UINT64 AllocationType,
        UINT64 Win32Protect){
  _SECTION_INHERIT v13; 
  NTSTATUS result; 
  _LARGE_INTEGER *v15; 
  UINT64 *v16; 
  UINT64 v17[16]; 

  v13 = (int)ZeroBits;
  memset(v17, 0i64, sizeof(v17));
  result = MiMapParametersInitialize(v17, (INT64)SectionToMap, (INT64)Process, (INT64)*CapturedBase, *CapturedViewSize);
  if( result >= 0 )
  {
    LODWORD(v16) = 1;
    LODWORD(v15) = InheritDisposition;
    result = MiMapViewOfSection(
               SectionToMap,
               (_EPROCESS *)v17,
               CapturedBase,
               CommitSize,
               (UINT64)SectionOffset,
               v15,
               v16,
               v13,
               v17[0],
               v17[1],
               v17[2],
               (VOID **)v17[3]);
    if( result < 0 )
    {
      if( *CapturedBase )
        ++*(&stru_140C4DB30 + 637);
      else
        ++*(&stru_140C4DB30 + 636);
    }
    else
    {
      *CapturedViewSize = v17[3];
    }
  }
  return result;
}

Referenced by: