PfSnNameQueryWorker
VOID __stdcall PfSnNameQueryWorker(PVOID Context){
volatile LONG *v1;
KIRQL v3;
_QWORD *v4;
unsigned __int64 v5;
void *v6;
__int64 v7;
v7 = 0i64;
v1 = (volatile LONG *)((char *)Context + 576);
while( 1 )
{
v3 = ExAcquireSpinLockExclusive(v1);
v4 = (_QWORD *)*((_QWORD *)Context + 67);
v5 = v3;
if( !v4 )
break;
*((_QWORD *)Context + 67) = *v4;
*v4 = 0i64;
ExReleaseSpinLockExclusiveFromDpcLevel((INT64 *)v1);
__writecr8(v5);
v6 = (void *)v4[1];
if( (*(int(__fastcall **)(_QWORD, void *, __int64 *))(qword_140C50138 + 16))(*((_QWORD *)Context + 44), v6, &v7) >= 0 )
PfSnVolumeKeyQuery((__int64)Context, v7, (__int64)v6);
ObfDereferenceObjectWithTag(v6, 0x746C6644ui64);
}
*((_QWORD *)Context + 71) = 0i64;
ExReleaseSpinLockExclusiveFromDpcLevel((INT64 *)v1);
__writecr8(v5);
ExReleaseRundownProtection((PEX_RUNDOWN_REF)Context + 45);
}Referenced by:
No references.