PfpPrivSourceAdd
NTSTATUS __stdcall PfpPrivSourceAdd(PFP_PRIVSOURCE_QUERY_CONTEXT *Context, PF_PRIVSOURCE_INFO *NewSource){
__int64 v3;
__int64 v4;
__int64 v5;
v3 = (unsigned int)Context[4];
if( (unsigned int)v3 >= Context[5] )
return -1073741789;
v4 = 96 * v3;
v5 = *(_QWORD *)Context;
*(_OWORD *)(v4 + v5 + 16) = *(_OWORD *)NewSource;
*(_OWORD *)(v4 + v5 + 32) = *((_OWORD *)NewSource + 1);
*(_OWORD *)(v4 + v5 + 48) = *((_OWORD *)NewSource + 2);
*(_OWORD *)(v4 + v5 + 64) = *((_OWORD *)NewSource + 3);
*(_OWORD *)(v4 + v5 + 80) = *((_OWORD *)NewSource + 4);
*(_OWORD *)(v4 + v5 + 96) = *((_OWORD *)NewSource + 5);
++*(_DWORD *)(*(_QWORD *)Context + 8i64);
++Context[4];
return 0;
}Referenced by:
PfpPrivSourceEnum