PipProcessQueryRemovalInKernelMode
NTSTATUS __stdcall PipProcessQueryRemovalInKernelMode(INT64 a1, INT64 a2, INT64 a3, UINT64 a4, VOID **a5, INT64 a6){
unsigned int v6;
unsigned int v9;
int v10;
v6 = a4;
v9 = a1;
if( (int)PipSendTargetDeviceQueryRemoveNotification(a2, (__int64)a5, (_UNICODE_STRING *)(unsigned int)a4, a6) < 0 )
return -2147483608;
v10 = PipSendQueryRemoveIrpAndCheckOpenHandles(v9, a2, a3, v6, a5, a6);
if( v10 < 0 )
PiSendTargetDeviceRemoveCanceledNotification((__int64)a5, v6);
return v10;
}Referenced by:
PiProcessQueryAndCancelRemoval