VfZwQueryVolumeInformationFile

NTSTATUS __stdcall VfZwQueryVolumeInformationFile(
        VOID *FileHandle,
        ULONG_PTR IoStatusBlock,
        VOID *FsInformation,
        UINT64 FsInformationClass,
        _FSINFOCLASS FsInformationClassa){
  unsigned int v5; 
  UINT64 v7; 
  VOID *retaddr; 

  v5 = FsInformationClass;
  v7 = *(_QWORD *)&IoStatusBlock;
  if( (unsigned int)ViZwShouldCheck() )
  {
    ViZwCheckVirtualAddress(v7, retaddr);
    ViZwCheckVirtualAddress((UINT64)FsInformation, retaddr);
  }
  return((__int64(__fastcall *)(VOID *, UINT64, VOID *, _QWORD, _FSINFOCLASS))pXdvZwQueryVolumeInformationFile)(
           FileHandle,
           v7,
           FsInformation,
           v5,
           FsInformationClassa);
}

Referenced by: