MiCheckPageFileMapping

UINT8 __stdcall MiCheckPageFileMapping(_HHIVE *Hive, UINT64 Parent, UINT64 Child){
  unsigned __int64 v4; 
  int(__fastcall *FileWrite)(_HHIVE *, unsigned int, CMP_OFFSET_ARRAY *, unsigned int, unsigned int); 
  UINT8 result; 

  if( !Hive->FileWrite )
    return 0;
  v4 = (unsigned __int8)ExAcquireSpinLockExclusive(&SpinLock);
  FileWrite = Hive->FileWrite;
  if( FileWrite && (*(_QWORD *)FileWrite || *((_QWORD *)FileWrite + 2)) )
  {
    ExReleaseSpinLockExclusiveFromDpcLevel(&SpinLock);
    result = 77;
  }
  else
  {
    ExReleaseSpinLockExclusiveFromDpcLevel(&SpinLock);
    result = 0;
  }
  __writecr8(v4);
  return result;
}

Referenced by: