CcIsFileObjectDirectMapped
BOOL __fastcall CcIsFileObjectDirectMapped(INT64 a1, CHAR a2){
bool v2;
int v4;
__int64 v5;
__int64 v6;
struct _KLOCK_QUEUE_HANDLE LockHandle;
v2 = 0;
memset(&LockHandle, 0, sizeof(LockHandle));
v4 = a2 & 1;
if( (a2 & 1) == 0 )
KeAcquireInStackQueuedSpinLock(&CcMasterLock, &LockHandle);
v5 = *(_QWORD *)(a1 + 40);
if( v5 )
{
v6 = *(_QWORD *)(v5 + 8);
if( v6 )
v2 = (*(_DWORD *)(v6 + 152) & 0x40000000) != 0;
}
if( !v4 )
{
KeReleaseInStackQueuedSpinLockFromDpcLevel(&LockHandle);
LODWORD(v5) = KiIrqlFlags;
__writecr8(LockHandle.OldIrql);
}
LOBYTE(v5) = v2;
return v5;
}Referenced by:
CcCanIWriteStreamEx
CcCopyWriteWontFlush