FsRtlCancellableWaitForMultipleObjects
INT64 __stdcall FsRtlCancellableWaitForMultipleObjects(
UINT64 Count,
VOID **ObjectArray,
WAIT_TYPE WaitType,
LARGE_INTEGER *Timeout,
KWAIT_BLOCK *WaitBlockArray,
IRP *Irp){
LONGLONG QuadPart;
unsigned int v10;
volatile unsigned __int64 TickCountQuad;
INT64 result;
volatile unsigned __int64 v13;
QuadPart = 0i64;
v10 = Count;
if( Timeout )
{
QuadPart = Timeout->QuadPart;
if( Timeout->QuadPart < 0 )
{
TickCountQuad = KUSER_SHARED_DATA.TickCountQuad;
QuadPart = TickCountQuad - Timeout->QuadPart / KeQueryTimeIncrement();
}
}
while( 1 )
{
if( v10 == 1 )
LODWORD(result) = KeWaitForSingleObject(*ObjectArray, Executive, 0, 1u, Timeout);
else
KeWaitForMultipleObjects((_BYTE *)v10, ObjectArray, WaitType, Executive, 0, 1u, Timeout, WaitBlockArray);
if( (_DWORD)result != 257 )
break;
if( (*((_DWORD *)KeGetCurrentThread() + 324) & 1) != 0 )
return 3221225547i64;
if( Irp && *((_BYTE *)Irp + 68) )
return 3221225760i64;
if( Timeout )
{
if( Timeout->QuadPart >= 0 )
{
if( *(__int64 *)&KUSER_SHARED_DATA.SystemTime.LowPart >= QuadPart )
return 258i64;
}
else
{
v13 = KUSER_SHARED_DATA.TickCountQuad;
if( (__int64)KUSER_SHARED_DATA.TickCountQuad >= QuadPart )
return 258i64;
Timeout->QuadPart = -(__int64)((QuadPart - v13) * KeQueryTimeIncrement());
}
}
}
return result;
}Referenced by:
FsRtlCancellableWaitForSingleObject
FsRtlKernelFsControlFile
FsRtlQueryInformationFile
FsRtlQueryKernelEaFile
FsRtlSetKernelEaFile