MiPrepareToStealNonPagedPool

NTSTATUS __stdcall MiPrepareToStealNonPagedPool(INT64 a1, INT64 a2){
  signed __int64 v3; 
  NTSTATUS v4; 

  if( (*(_BYTE *)(a1 + 35) & 0x10) != 0 )
    return 0;
  LODWORD(v3) = MI_READ_PTE_LOCK_FREE(a2);
  if( (v3 & 0x220) != 32 )
    return 0;
  v4 = v3 & 0xFFFFFFDF;
  if( v3 != _InterlockedCompareExchange64((volatile signed __int64 *)a2, v3 & 0xFFFFFFFFFFFFFFDFui64, v3) )
    return 0;
  KeFlushSingleTb(((a2 << 25) - ((_QWORD)MmGetPteBase() << 25)) >> 16, FlushKernel, 2i64);
  return v4;
}

Referenced by: