FsRtlpPostStackOverflow
void __fastcall FsRtlpPostStackOverflow(_LIST_ENTRY *a1, _LIST_ENTRY *a2, _LIST_ENTRY *a3, unsigned __int8 a4){
__int64 v5;
_LIST_ENTRY *PoolWithTag;
v5 = a4;
PoolWithTag = (_LIST_ENTRY *)ExAllocatePoolWithTag(0x200ui64, 0x38ui64, 1936872262i64);
if( !PoolWithTag )
{
if( !(_BYTE)v5 )
RtlRaiseStatus(-1073741670);
KeWaitForSingleObject((UINT64)&word_140C47420, 0, 0, 0, 0i64);
PoolWithTag = (_LIST_ENTRY *)&unk_140C473E0;
}
PoolWithTag[2].Blink = a1;
PoolWithTag[3].Flink = a2;
PoolWithTag[2].Flink = a3;
PoolWithTag->Flink = 0i64;
PoolWithTag[1].Flink = (_LIST_ENTRY *)FsRtlStackOverflowRead;
PoolWithTag[1].Blink = PoolWithTag;
KeInsertQueue((_KQUEUE *)((char *)&unk_140C47360 + 64 * v5), PoolWithTag);
}Referenced by:
FsRtlPostPagingFileStackOverflow
FsRtlPostStackOverflow