As is from ntoskrnl.exe disassembly (VirtualAddress may be unaligned):
| 98 | { |
| 99 | // As is from ntoskrnl.exe disassembly (VirtualAddress may be unaligned): |
| 100 | inline static unsigned long long MiGetPteAddress(unsigned long long VirtualAddress) |
| 101 | { |
| 102 | return 0xFFFFF680'00000000ull + ((VirtualAddress >> 9ull) & 0x7FFFFFFFF8ull); |
| 103 | } |
| 104 | |
| 105 | // To fixup differences between different kernels: |
| 106 | static const unsigned long long g_PteCorrective = []() -> unsigned long long |
no outgoing calls
no test coverage detected