MiReserveFaultPte
NTSTATUS __stdcall MiReserveFaultPte(){
UINT8 *v0;
unsigned int ClearBitsAndSet;
VOID *NodeOrParent;
_KLOCK_QUEUE_HANDLE LockHandle;
memset(&LockHandle, 0, sizeof(LockHandle));
KeAcquireInStackQueuedSpinLock((PKSPIN_LOCK)&stru_140C4DB30 + 490, &LockHandle);
ClearBitsAndSet = (unsigned int)RtlFindClearBitsAndSet(
(_RTL_AVL_TABLE *)&NodeOrParent,
(VOID *)1,
0i64,
v0,
(VOID *)0x10,
(_TABLE_SEARCH_RESULT)((char *)&stru_140C4DB30 + 3928));
KeReleaseInStackQueuedSpinLockFromDpcLevel(&LockHandle);
__writecr8(LockHandle.OldIrql);
if( ClearBitsAndSet == -1 )
return 0;
else
return *(&stru_140C4DB30 + 978) + 8 * ClearBitsAndSet;
}Referenced by:
MiValidateImagePfn