PipProcessQueryRemovalInKernelMode

NTSTATUS __stdcall PipProcessQueryRemovalInKernelMode(INT64 a1, INT64 a2, INT64 a3, UINT64 a4, VOID **a5, INT64 a6){
  unsigned int v6; 
  unsigned int v9; 
  int v10; 

  v6 = a4;
  v9 = a1;
  if( (int)PipSendTargetDeviceQueryRemoveNotification(a2, (__int64)a5, (_UNICODE_STRING *)(unsigned int)a4, a6) < 0 )
    return -2147483608;
  v10 = PipSendQueryRemoveIrpAndCheckOpenHandles(v9, a2, a3, v6, a5, a6);
  if( v10 < 0 )
    PiSendTargetDeviceRemoveCanceledNotification((__int64)a5, v6);
  return v10;
}

Referenced by:

PiProcessQueryAndCancelRemoval