IoInitializeRemoveLockEx
VOID *__stdcall IoInitializeRemoveLockEx(
PIO_REMOVE_LOCK Lock,
UINT32 AllocateTag,
UINT32 MaxLockedMinutes,
UINT32 HighWatermark,
UINT32 RemlockSize){
VOID *result;
unsigned __int64 v7;
if( Lock )
{
if( RemlockSize == 32 )
{
LABEL_3:
*(_BYTE *)Lock = 0;
result = (char *)Lock + 16;
*((_DWORD *)Lock + 1) = 1;
*((_QWORD *)Lock + 3) = (char *)Lock + 16;
*((_QWORD *)Lock + 2) = (char *)Lock + 16;
*((_WORD *)Lock + 4) = 1;
*((_BYTE *)Lock + 10) = 6;
*((_DWORD *)Lock + 3) = 0;
return result;
}
if( RemlockSize == 120 )
{
*((_DWORD *)Lock + 8) = 1129270354;
*((_DWORD *)Lock + 9) = HighWatermark;
v7 = MaxLockedMinutes * (unsigned __int64)(unsigned int)KeMaximumIncrement;
*((_DWORD *)Lock + 12) = AllocateTag;
*((_QWORD *)Lock + 9) = 0i64;
*((_QWORD *)Lock + 5) = 600000000 * v7;
*((_DWORD *)Lock + 20) = 0;
*((_QWORD *)Lock + 14) = 0i64;
goto LABEL_3;
}
}
return result;
}Referenced by:
PopFxCreateDeviceCommon
PopFxRegisterDeviceWorker
VfFilterAttach