KeForceDetachProcess
VOID __stdcall KeForceDetachProcess(_KAPC_STATE *ApcState, INT8 a2){
int v3;
_KAPC_STATE *v4;
__int128 v5[3];
v3 = a2 & 1;
v4 = (_KAPC_STATE *)v5;
v5[0] = 0i64;
if( ApcState )
v4 = ApcState;
memset(&v5[1], 0, 32);
KiUnstackDetachProcess(v4, (unsigned int)(2 * v3 + 1));
}Referenced by:
MiReAcquireOutSwappedProcessCommit
MiReleaseCommitForResetPages
MiReleaseOutSwappedProcessCommit
MiSharePages
MiTrimSharedPageFromViews
MiUnlockStealVm
MmQueryCommitReleaseState
MmReleaseCommitForMemResetPages
PopHandleNextState