CcNotifyWriteBehindInternal
NTSTATUS __stdcall CcNotifyWriteBehindInternal(_IRP *Irp, _ETHREAD *Thread){
char v2;
NTSTATUS result;
v2 = (char)Thread;
if( dword_140C507FC )
{
if( ((unsigned __int8)Thread & 1) != 0 )
result = KeSetEvent((PRKEVENT)&Irp[1].Tail.ListEntry, 0, 0);
if( (v2 & 2) != 0 )
result = KeSetEvent((PRKEVENT)&Irp[1].Tail.OriginalFileObject, 0, 0);
if( (v2 & 4) != 0 )
result = KeSetEvent((PRKEVENT)&Irp[2].MdlAddress, 0, 0);
if( (v2 & 8) != 0 )
result = KeSetEvent((PRKEVENT)&Irp[2].ThreadListEntry, 0, 0);
if( (v2 & 0x10) != 0 )
return KeSetEvent((PRKEVENT)&Irp[2].IoStatus.Information, 0, 0);
}
return result;
}Referenced by:
CcExitPartition
CcNotifyWriteBehindEx
CcNotifyWriteBehindHelper
CcScanDpc
CcScheduleLazyWriteScan