RawQueryFileSystemInformation
__int64 __fastcall RawQueryFileSystemInformation(__int64 a1, __int64 a2, __int64 a3){
unsigned int v4;
int v5;
DEVICE_OBJECT *v6;
struct _KEVENT Event;
IO_STATUS_BLOCK v9;
LARGE_INTEGER StartingOffset[2];
SIZE_T NumberOfBytes;
NumberOfBytes = 0i64;
v4 = *(_DWORD *)(a2 + 8);
memset(&Event, 0, sizeof(Event));
v9 = 0i64;
*(_OWORD *)&StartingOffset[0].LowPart = 0i64;
if( v4 >= 9 )
{
memset(*(_QWORD *)(a1 + 24), 0i64);
v5 = RawPerformDevIoCtrl(v6, *(PVOID *)(a3 + 176));
if( v5 >= 0 )
return(unsigned int)-1073741637;
}
else
{
return(unsigned int)-1073741789;
}
return(unsigned int)v5;
}Referenced by:
RawUserFsCtrl