PfSnCheckLoggingForThread
INT64 __fastcall PfSnCheckLoggingForThread(INT64 a1, INT64 a2, CHAR a3){
__int64 v3;
__int64 v4;
__int64 v5;
unsigned int v6;
if( (((a3 & 2) == 0) & (*(_BYTE *)(a1 + 1304) >> 6)) != 0 )
return 0;
if( (int)PsGetIoPriorityThread(a1) < 2 )
{
_InterlockedIncrement((volatile signed __int32 *)(v3 + 336));
return 0;
}
v5 = *(_QWORD *)(v3 + 432);
v6 = 0;
if( !v5 || v5 == v4 && *(_QWORD *)(v3 + 440) == *(_QWORD *)(v4 + 1152) )
return 1;
return v6;
}Referenced by:
MiCompleteRestrictedImageFault
MiMakeSystemCacheRangeValid
PfFileInfoNotify
PfSnLogPageFault