ExpWnfWorkItemRoutine
VOID __fastcall ExpWnfWorkItemRoutine(VOID *Parameter){
_ETHREAD *CurrentThread;
CurrentThread = (_ETHREAD *)KeGetCurrentThread();
--*((_WORD *)CurrentThread + 242);
do
{
_InterlockedAnd((volatile signed __int32 *)(*(_QWORD *)ExpWnfDispatcher + 40i64), 0xFFFFFFFD);
ExpWnfDispatchKernelSubscription();
}
while( _InterlockedCompareExchange((volatile signed __int32 *)(*(_QWORD *)ExpWnfDispatcher + 40i64), 0, 1) != 1 );
KeLeaveCriticalRegionThread((__int64)KeGetCurrentThread());
}Referenced by:
No references.