VOID __stdcall MmSynchronizeAddressPolicy(_EPROCESS *a1){ if( a1 != PsInitialSystemProcess ) MiDeleteProcessShadow(); }