IofCallDriver
NTSTATUS __fastcall IofCallDriver(UINT64 a1, UINT64 a2){
void *v2;
unsigned __int8 *v3;
__int64 v4;
NTSTATUS result;
VOID *retaddr;
if( IopDispatchCallDriver )
{
if( IopDispatchCallDriver == 3 )
return IopPerfCallDriver((_DEVICE_OBJECT *)a1, (_IRP *)a2, v2);
else
return IovCallDriver((PVOID)a1, (_IRP *)a2, retaddr);
}
else
{
if( (char)--*(_BYTE *)(a2 + 67) <= 0 )
KeBugCheckEx(0x35u, (PVOID)a2, 0i64, 0i64, 0i64);
v3 = (unsigned __int8 *)(*(_QWORD *)(a2 + 184) - 72i64);
*(_QWORD *)(a2 + 184) = v3;
v4 = *v3;
*((_QWORD *)v3 + 5) = a1;
if( (_BYTE)v4 == 22 && (unsigned __int8)(v3[1] - 2) <= 1u )
IopPoHandleIrp((_IRP *)a2);
else
return(*(__int64(__fastcall **)(UINT64))(*(_QWORD *)(a1 + 8) + 8 * v4 + 112))(a1);
}
return result;
}Referenced by:
CcSetValidData
CmpFileFlushAndPurge
CmpGetVolumeClusterSize
FsRtlBalanceReads
FsRtlGetDirectImageOriginalBase
FsRtlGetFileSize
FsRtlGetVirtualDiskNestingLevel
FsRtlIssueDeviceIoControl
FsRtlIssueFileNotificationFsctl
FsRtlKernelFsControlFile
FsRtlQueryCachedVdl
FsRtlQueryInformationFile
FsRtlQueryKernelEaFile
FsRtlSetFileSize
FsRtlSetKernelEaFile
HalpCallWakeAlarmDriver
HalpPassIrpFromFdoToPdo
HalpQueryAcpiRealTimeClock
HalpQueryAcpiWakeAlarmSystemPowerState
HalpQueryPccInterface
HalpSetAcpiRealTimeClock
IoAsynchronousPageWrite
IoCallDriverWithTracing
IoSetInformation
IoShutdownSystem
IoSynchronousCallDriver
IoSynchronousPageWriteEx
IoVerifyVolume
IoVolumeDeviceNameToGuidPath
IoVolumeDeviceToDosName
IoVolumeDeviceToGuidPath
IopAssignBootDriveLetter
IopCallDriverReference
IopCloseFile
IopCreateArcName
IopCreateArcNamesCd
IopDeleteFile
IopEjectDevice
IopFilterResourceRequirementsCall
IopFreeBandwidthContract
IopGetBootDiskInformation
IopGetFileInformation
IopGetSetObjectId
IopGetSetSecurityObject
IopGetVolumeId
IopInvalidateVolumesForDevice
IopIssueSystemEnvironmentCallout
IopLoadFileSystemDriver
IopMountVolume
IopQueryXxxInformation
IopSetRemoteLink
IopShutdownBaseFileSystems
IopSynchronousCall
IopSynchronousServiceTail
NT_DISK::Control
NtApphelpCacheControl
PiPagePathSetState
PipSendGuestAssignedNotification
PnpAsynchronousCall
PnpQueryInterface
PoCallDriver
PopBatteryQueryStatus
PopBatteryWaitTag
PopDequeueQuerySetIrp
PopFanWorker
PopQueueQuerySetIrp
PopThermalWorker
RawPerformDevIoCtrl
RawQueryFileSystemInformation
RawQueryFsSizeInfo
RawReadWriteDeviceControl
SbpAddTransportToInstance
SbpStartLanman
SmKmIssueVolumeIo
SmKmSendDeviceControl
SmKmSendUsageNotification
SmStorePhysicalRequestIssue
VfIrpSendSynchronousIrp
VhdiMountVhdFile
VhdiVerifyBootDisk
ViFilterDispatchGeneric
ViFilterDispatchPnp
WmipForwardWmiIrp