CcGetFileObjectFromSectionPtrsRef
FILE_OBJECT *__stdcall CcGetFileObjectFromSectionPtrsRef(_SECTION_OBJECT_POINTERS *SectionObjectPointer){
FILE_OBJECT *v2;
_QWORD *SharedCacheMap;
struct _KLOCK_QUEUE_HANDLE LockHandle;
v2 = 0i64;
memset(&LockHandle, 0, sizeof(LockHandle));
KeAcquireInStackQueuedSpinLock(&CcMasterLock, &LockHandle);
SharedCacheMap = SectionObjectPointer->SharedCacheMap;
if( SharedCacheMap )
{
v2 = (FILE_OBJECT *)(SharedCacheMap[12] & 0xFFFFFFFFFFFFFFF0ui64);
ObfReferenceObjectWithTag(v2, 0x746C6644u);
}
KeReleaseInStackQueuedSpinLockFromDpcLevel(&LockHandle);
__writecr8(LockHandle.OldIrql);
return v2;
}Referenced by:
No references.