VfZwOpenFile

NTSTATUS __stdcall VfZwOpenFile(
        VOID **FileHandle,
        UINT64 DesiredAccess,
        ULONG_PTR ObjectAttributes,
        ULONG_PTR IoStatusBlock,
        UINT64 OpenOptions,
        UINT64 OpenOptionsa){
  UINT64 v6; 
  _OBJECT_ATTRIBUTES *v7; 
  unsigned int v8; 
  VOID *retaddr; 

  v6 = *(_QWORD *)&IoStatusBlock;
  v7 = *(_OBJECT_ATTRIBUTES **)&ObjectAttributes;
  v8 = DesiredAccess;
  if( (unsigned int)ViZwShouldCheck() )
  {
    ViZwCheckVirtualAddress((UINT64)FileHandle, retaddr);
    ViZwCheckObjectAttributes(v7, retaddr);
    ViZwCheckVirtualAddress(v6, retaddr);
  }
  return((__int64(__fastcall *)(VOID **, _QWORD, _OBJECT_ATTRIBUTES *, UINT64, _DWORD, _DWORD))pXdvZwOpenFile)(
           FileHandle,
           v8,
           v7,
           v6,
           OpenOptions,
           OpenOptionsa);
}

Referenced by:

No references.