VslBindNtIum

NTSTATUS __stdcall VslBindNtIum(){
  unsigned __int64 v0; 
  __int16 v1; 
  unsigned __int64 v2; 
  NTSTATUS result; 
  __int64 BaseAddress[16]; 
  UINT64 v5; 
  INT64 v6[14]; 

  memset(v6, 0i64, 0x68u);
  BaseAddress[2] = 0i64;
  BaseAddress[11] = 0i64;
  v6[1] = (INT64)BaseAddress;
  BaseAddress[0] = 45184i64;
  BaseAddress[1] = 384i64;
  BaseAddress[3] = 44800i64;
  BaseAddress[4] = 7i64;
  BaseAddress[5] = 34920i64;
  BaseAddress[6] = 208i64;
  BaseAddress[7] = 209i64;
  BaseAddress[8] = 36i64;
  BaseAddress[9] = 68i64;
  BaseAddress[10] = 2200i64;
  BaseAddress[12] = 1072i64;
  BaseAddress[13] = 484i64;
  BaseAddress[14] = 486i64;
  BaseAddress[15] = 152i64;
  v5 = 796i64;
  v6[2] = 136i64;
  LODWORD(v0) = MmGetPhysicalAddress((UINT64)BaseAddress);
  v6[3] = (unsigned int)(v0 >> 12);
  if( (unsigned __int64)((v1 + 48) & 0xFFF) + 136 > 0x1000 )
  {
    LODWORD(v2) = MmGetPhysicalAddress((UINT64)&v5 + 7);
    v6[4] = (unsigned int)(v2 >> 12);
  }
  result = VslpEnterIumSecureMode(2u, 254, 0i64, (INT64)v6);
  if( result < 0 )
    KeBugCheckEx(0x6Fu, (PVOID)result, (PVOID)0xFF, 0i64, 0i64);
  return result;
}

Referenced by:

HvlEnableVsmCalls