IopQueryNameInternal

INT64 __stdcall IopQueryNameInternal(
        VOID *Object,
        UINT8 UseDosDeviceName,
        OBJECT_NAME_INFORMATION *ObjectNameInfo,
        UINT64 Length,
        UINT64 *ReturnLength,
        INT8 Mode){
  _QWORD *v6; 
  UINT8 *v7; 
  char v8; 
  unsigned int v9; 
  __int128 *v10; 
  _DWORD *v11; 
  int v12; 
  UINT64 v13; 
  UINT8 *v14; 
  char v15; 
  unsigned int v16; 
  FILE_OBJECT *v17; 
  char v18; 
  _DWORD *v19; 
  UINT8 *v20; 
  int FileInformation; 
  int v22; 
  unsigned int v23; 
  unsigned int v24; 
  UINT8 *v25; 
  UINT8 *PoolWithTagPriority; 
  unsigned int v28; 
  int v29; 
  UINT64 ReturnLengtha; 
  UINT8 *v31; 
  PVOID P; 
  __int128 v33[5]; 
  bool v35; 
  char v36; 
  char v37; 
  INT8 v39; 
  v37 = (char)ObjectNameInfo;
  v6 = Object;
  LODWORD(ReturnLengtha) = 0;
  v7 = 0i64;
  P = 0i64;
  v35 = 0;
  v8 = 0;
  v33[0] = 0i64;
  v9 = 16;
  if( (unsigned int)ReturnLength >= 0x10 )
    v9 = (unsigned int)ReturnLength;
  if( v39 == 1 )
  {
    if( (unsigned int)VfIsVerifierEnabled()
      && ((VfRuleClasses & 0xFFAFFFFF) != 0
       || (VfRuleClasses & 0x200000000i64) != 0
       || (VfRuleClasses & 0x400000000i64) != 0) )
    {
      PoolWithTagPriority = (UINT8 *)ExAllocatePoolWithTagPriority(
                                       PagedPool,
                                       v9,
                                       0x20206F49ui64,
                                       (_EX_POOL_PRIORITY)((MmVerifierData & 0x10 | 0x40) >> 1));
    }
    else
    {
      PoolWithTagPriority = (UINT8 *)ExAllocatePoolWithTag(PagedPool, v9, 0x20206F49ui64);
    }
    v7 = PoolWithTagPriority;
    P = PoolWithTagPriority;
    if( !PoolWithTagPriority )
    {
      v12 = -1073741670;
      goto LABEL_44;
    }
    v10 = (__int128 *)PoolWithTagPriority;
    v6 = Object;
  }
  else
  {
    v10 = v33;
    if( (unsigned int)ReturnLength >= 0x10 )
      v10 = (__int128 *)Length;
  }
  v11 = (_DWORD *)v6[1];
  if( !v37 )
    goto LABEL_47;
  if( (v11[13] & 0x10) == 0 )
  {
    v12 = IoVolumeDeviceToDosName(v11, (UNICODE_STRING *)v10);
    LODWORD(ReturnLengtha) = *(unsigned __int16 *)v10 + 18;
    v6 = Object;
    goto LABEL_9;
  }
  LODWORD(ReturnLengtha) = 20;
  if( v9 >= 0x14 )
  {
    v12 = 0;
    *(_DWORD *)v10 = 131074;
    *((_WORD *)v10 + 8) = 92;
    *((_QWORD *)v10 + 1) = v10 + 1;
LABEL_9:
    if( v12 >= 0 )
    {
      v8 = 1;
      goto LABEL_11;
    }
  }
  v11 = (_DWORD *)v6[1];
LABEL_47:
  v12 = ObQueryNameStringMode(v11, (OBJECT_NAME_INFORMATION *)v10, v9, &ReturnLengtha, 0);
LABEL_11:
  if( v12 < 0 )
  {
    if( v12 != -1073741820 )
      goto LABEL_44;
  }
  else if( !v8 )
  {
    v35 = *(_WORD *)v10 == 0;
  }
  v13 = Length;
  v14 = (UINT8 *)(Length + 16);
  v15 = v37;
  if( v37 && v8 )
  {
    if( v9 < (unsigned int)ReturnLengtha )
      v16 = v9 - 16;
    else
      v16 = *(unsigned __int16 *)v10;
    memmove((UINT8 *)(Length + 16), *((UINT8 **)v10 + 1), v16);
    v17 = (FILE_OBJECT *)Object;
    if( (*(_DWORD *)(*((_QWORD *)Object + 1) + 52i64) & 0x10) == 0 )
    {
      ExFreePoolWithTag(*((PVOID *)v10 + 1), 0);
      v13 = Length;
      v15 = v37;
LABEL_20:
      v17 = (FILE_OBJECT *)Object;
      goto LABEL_21;
    }
    v13 = Length;
    v15 = v37;
  }
  else
  {
    if( v39 != 1 || (unsigned int)ReturnLength < 0x10 || (unsigned int)ReturnLengtha > v9 )
      goto LABEL_20;
    *(_WORD *)Length = *(_WORD *)v10;
    *(_WORD *)(Length + 2) = *((_WORD *)v10 + 1);
    memmove(v14, (UINT8 *)v10 + 16, (unsigned int)ReturnLengtha - 16i64);
    v13 = Length;
    v17 = (FILE_OBJECT *)Object;
    v15 = v37;
  }
LABEL_21:
  if( v35 )
    LODWORD(ReturnLengtha) = ReturnLengtha + 2;
  v18 = 0;
  v36 = 0;
  if( (unsigned int)ReturnLength < 0x10 || (unsigned int)ReturnLengtha > v9 )
  {
    v19 = (_DWORD *)Mode;
    *(_DWORD *)Mode = ReturnLengtha;
    v18 = 1;
    v36 = 1;
  }
  else
  {
    *(_QWORD *)(v13 + 8) = v14;
    v14 += *(unsigned __int16 *)v10;
    v19 = (_DWORD *)Mode;
  }
  if( v39 == 1 )
  {
    v20 = v7;
    if( !v18 )
      v9 = v9 - ReturnLengtha + 4;
  }
  else if( v18 )
  {
    v20 = (UINT8 *)v33;
    if( (unsigned int)ReturnLength >= 0x10 )
      v20 = (UINT8 *)v13;
  }
  else
  {
    v20 = v14 - 4;
    LODWORD(v31) = *((_DWORD *)v14 - 1);
    v9 = v13 + v9 - ((_DWORD)v14 - 4) - 2;
  }
  if( (v39 != 1 || v15) && (v17->Flags & 2) != 0 )
    FileInformation = IopGetFileInformation(v17, v9, FileNameInformation, v20, &ReturnLengtha);
  else
    FileInformation = IopQueryXxxInformation(v17, 9ui64, v9, v39, v20, &ReturnLengtha, 1u);
  v12 = FileInformation;
  if( (FileInformation & 0xC0000000) == -1073741824 )
  {
    v28 = FileInformation + 1073741822;
    if( (unsigned int)(v12 + 1073741822) > 0xE )
      goto LABEL_44;
    v29 = 18435;
    if( !_bittest(&v29, v28) )
      goto LABEL_44;
    LODWORD(ReturnLengtha) = 4;
    *(_DWORD *)v20 = 0;
    *((_WORD *)v20 + 2) = 92;
    v12 = 0;
    v22 = ReturnLengtha;
  }
  else
  {
    v22 = ReturnLengtha;
    if( (unsigned int)ReturnLengtha < 4 )
      v22 = 4;
    LODWORD(ReturnLengtha) = v22;
  }
  if( v36 )
  {
    *v19 += *(_DWORD *)v20;
    v12 = (unsigned int)ReturnLength < 0x10 ? -1073741820 : -2147483643;
  }
  else
  {
    v23 = v22 - 4;
    v24 = *(_DWORD *)v20;
    if( v23 <= *(_DWORD *)v20 )
      v24 = v23;
    LODWORD(ReturnLengtha) = (_DWORD)v14 + *(_DWORD *)v20 - Length;
    if( *((_WORD *)v20 + 2) == 92 )
    {
      if( v39 == 1 )
        memmove(v14, v20 + 4, v24);
      else
        *(_DWORD *)v20 = (_DWORD)v31;
      v25 = &v14[v24];
      v31 = v25;
      *(_WORD *)v25 = 0;
      LODWORD(ReturnLengtha) = ReturnLengtha + 2;
      *v19 = ReturnLengtha;
      LOWORD(v25) = (_WORD)v25 - Length;
      *(_WORD *)Length = (_WORD)v25 - 16;
      *(_WORD *)(Length + 2) = (_WORD)v25 - 14;
    }
    else
    {
      v12 = -1073741767;
    }
  }
LABEL_44:
  if( v7 )
    ExFreePoolWithTag(v7, 0);
  return(unsigned int)v12;
}

Referenced by: