ExpWnfFindStateName

ntfs-wnf-9.c

_QWORD *__fastcall ExpWnfFindStateName(__int64 scopeinstance, unsigned __int64 statename)
{
  _QWORD *i; // rax

  for ( i = *(_QWORD **)(scopeinstance + 0x38); ; i = (_QWORD *)i[1] )
  {
    while ( 1 )
    {
      if ( !i )
        return 0i64;
      if ( statename >= i[3] )
        break;
      i = (_QWORD *)*i;
    }
    if ( statename <= i[3] )
      break;
  }
  return i - 2;
}