MiCreateInitialSystemWsles
BOOL __stdcall MiCreateInitialSystemWsles(){
_MMSUPPORT_INSTANCE *AnyMultiplexedVm;
_MMSUPPORT_INSTANCE *v1;
__int16 v2;
_MMSUPPORT_SHARED *SharedVm;
char v4;
INT64 v6[22];
char v7[304];
memset(v6, 0i64, sizeof(v6));
memset(v7, 0i64, 0x128u);
AnyMultiplexedVm = MiGetAnyMultiplexedVm(MiWorkingSetTypeSystemViews, (VOID *)1);
v6[5] = -1i64;
v1 = AnyMultiplexedVm;
v6[3] = (INT64)AnyMultiplexedVm;
v6[21] = (INT64)v7;
LOWORD(v6[0]) = v2;
v6[19] = (INT64)MiCreatePteWsle;
SharedVm = MiGetSharedVm(AnyMultiplexedVm);
v4 = ExAcquireSpinLockExclusive((INT64 *)&SharedVm->WorkingSetLock);
SharedVm->GoodCitizenWaiting = 0;
BYTE6(v6[0]) = v4;
LODWORD(SharedVm) = MiWalkPageTables((INT64)v6);
MiUnlockWorkingSetExclusive(v1, BYTE6(v6[0]));
return(_DWORD)SharedVm != 4;
}Referenced by:
MiInitializeDriverImages