PfSnCancelTraceTimer

NTSTATUS __stdcall PfSnCancelTraceTimer(PFSN_TRACE_HEADER *Trace){
  UINT64 *v1; 
  unsigned __int8 v3; 
  unsigned __int64 v4; 
  bool v5; 

  v1 = (UINT64 *)(Trace + 68);
  v3 = KeAcquireSpinLockRaiseToDpc((UINT64 *)Trace + 34);
  Trace[70] |= 2u;
  v4 = v3;
  v5 = (unsigned __int8)KeCancelTimer((INT64)(Trace + 34)) != 0;
  KxReleaseSpinLock(v1);
  __writecr8(v4);
  if( v5 )
    ExReleaseRundownProtection((_EX_RUNDOWN_REF *)Trace + 45);
  return 0;
}

Referenced by:

PfSnDeactivateTrace