VOID __fastcall RawBeginOperation(INT64 Vcb, INT64 FileObject){ __int64 v2; v2 = *(_QWORD *)(Vcb + 200); if( !v2 || FileObject != v2 ) ExAcquireRundownProtectionCacheAwareEx(*(_QWORD *)(Vcb + 216), 1i64); }