PipProcessQueryRemovalInKernelMode

INT64 __fastcall PipProcessQueryRemovalInKernelMode(INT64 a1, INT64 rdx0, INT64 a3, UINT64 r9_0, VOID **a2, INT64 a4){
  unsigned int v6; 
  unsigned int v9; 
  int v10; 
  v6 = r9_0;
  v9 = a1;
  if( (int)PipSendTargetDeviceQueryRemoveNotification(rdx0, (INT64)a2, (UNICODE_STRING *)(unsigned int)r9_0, a4) < 0 )
  {
    return(unsigned int)-2147483608;
  }
  else
  {
    v10 = PipSendQueryRemoveIrpAndCheckOpenHandles(v9, rdx0, a3, v6, a2, a4);
    if( v10 < 0 )
      PiSendTargetDeviceRemoveCanceledNotification((INT64)a2, v6);
  }
  return(unsigned int)v10;
}

Referenced by: