WmipFindRegEntryByProviderId
_LIST_ENTRY *__stdcall WmipFindRegEntryByProviderId(UINT64 ProviderId){
unsigned int v1;
unsigned __int64 v2;
VOID **RegEntryByProviderId;
_LIST_ENTRY *v4;
v1 = ProviderId;
KeWaitForSingleObject((UINT64)&ExBootDevicesRemovedEvent + 3072, 0, 0, 0, 0i64);
v2 = (unsigned __int8)KeAcquireSpinLockRaiseToDpc((UINT64 *)&ExBootDevicesRemovedEvent + 436);
RegEntryByProviderId = WmipDoFindRegEntryByProviderId(v1);
v4 = (_LIST_ENTRY *)RegEntryByProviderId;
if( RegEntryByProviderId )
_InterlockedIncrement((volatile signed __int32 *)RegEntryByProviderId + 12);
KxReleaseSpinLock((UINT64 *)&ExBootDevicesRemovedEvent + 436);
__writecr8(v2);
KeReleaseMutex((_KMUTANT *)((char *)&ExBootDevicesRemovedEvent + 3072), 0);
return v4;
}Referenced by:
IoWMISystemControl
WmipForwardWmiIrp