VfZwQueryObject
NTSTATUS __stdcall VfZwQueryObject(
VOID *Handle,
_OBJECT_INFORMATION_CLASS ObjectInformationClass,
VOID *ObjectInformation,
UINT64 ObjectInformationLength,
UINT64 *ReturnLength){
unsigned int v5;
UINT64 v9;
VOID *retaddr;
v5 = ObjectInformationLength;
if( (unsigned int)ViZwShouldCheck() )
{
ViZwCheckVirtualAddress(v9, retaddr);
ViZwCheckVirtualAddress((UINT64)ReturnLength, retaddr);
}
return((__int64(__fastcall *)(VOID *, _QWORD, VOID *, _QWORD, UINT64 *))pXdvZwQueryObject)(
Handle,
(unsigned int)ObjectInformationClass,
ObjectInformation,
v5,
ReturnLength);
}Referenced by:
No references.