MmCreateSection
NTSTATUS __stdcall MmCreateSection(
VOID **SectionObject,
UINT64 DesiredAccess,
_OBJECT_ATTRIBUTES *ObjectAttributes,
_LARGE_INTEGER *InputMaximumSize,
UINT64 SectionPageProtection,
UINT64 AllocationAttributes,
VOID *FileHandle,
_FILE_OBJECT *FileObject){
int v8;
__int128 *v9;
UINT64 v11;
_FILE_OBJECT *v12;
__int128 v13;
v8 = AllocationAttributes;
v9 = 0i64;
v13 = 0i64;
if( (AllocationAttributes & 0x7F) != 0 )
{
v9 = &v13;
v8 = AllocationAttributes & 0xFFFFFF80;
*(_QWORD *)&v13 = 2i64;
*((_QWORD *)&v13 + 1) = (unsigned int)(AllocationAttributes & 0x7F) - 1;
}
LODWORD(v12) = 0;
LODWORD(v11) = v8;
return MmCreateSectionEx(
SectionObject,
ObjectAttributes,
(_OBJECT_ATTRIBUTES *)InputMaximumSize->QuadPart,
(_LARGE_INTEGER *)(unsigned int)SectionPageProtection,
v11,
(_FILE_OBJECT *)FileHandle,
FileObject,
v12,
(UINT64)v9);
}Referenced by:
AlpcpCreateSection
EtwpCoverageEnsureContext
MiInitializeApiSets
MiInitializeCfg
PspApiSetCopyToSystemSpace
PspSiloInitializeUserSharedData