VfZwOpenFile
NTSTATUS __stdcall VfZwOpenFile(
VOID **FileHandle,
UINT64 DesiredAccess,
ULONG_PTR ObjectAttributes,
ULONG_PTR IoStatusBlock,
UINT64 OpenOptions,
UINT64 OpenOptionsa){
UINT64 v6;
_OBJECT_ATTRIBUTES *v7;
unsigned int v8;
VOID *retaddr;
v6 = *(_QWORD *)&IoStatusBlock;
v7 = *(_OBJECT_ATTRIBUTES **)&ObjectAttributes;
v8 = DesiredAccess;
if( (unsigned int)ViZwShouldCheck() )
{
ViZwCheckVirtualAddress((UINT64)FileHandle, retaddr);
ViZwCheckObjectAttributes(v7, retaddr);
ViZwCheckVirtualAddress(v6, retaddr);
}
return((__int64(__fastcall *)(VOID **, _QWORD, _OBJECT_ATTRIBUTES *, UINT64, _DWORD, _DWORD))pXdvZwOpenFile)(
FileHandle,
v8,
v7,
v6,
OpenOptions,
OpenOptionsa);
}Referenced by:
No references.