VfZwAccessCheckAndAuditAlarm

NTSTATUS __stdcall VfZwAccessCheckAndAuditAlarm(
        _UNICODE_STRING *SubsystemName,
        VOID *HandleId,
        _UNICODE_STRING *ObjectTypeName,
        _UNICODE_STRING *ObjectName,
        VOID *SecurityDescriptor,
        UINT64 DesiredAccess,
        PVOID GenericMapping,
        UINT8 ObjectCreation,
        UINT64 *GrantedAccess,
        INT64 *AccessStatus,
        UINT8 *GenerateOnClose){
  VOID *retaddr; 

  if( (unsigned int)ViZwShouldCheck() )
  {
    ViZwCheckUnicodeString(SubsystemName, retaddr);
    ViZwCheckUnicodeString(ObjectTypeName, retaddr);
    ViZwCheckUnicodeString(ObjectName, retaddr);
    ViZwCheckVirtualAddress((UINT64)SecurityDescriptor, retaddr);
    ViZwCheckVirtualAddress((UINT64)GenericMapping, retaddr);
    ViZwCheckVirtualAddress((UINT64)GrantedAccess, retaddr);
    ViZwCheckVirtualAddress((UINT64)GenerateOnClose, retaddr);
  }
  return((__int64(__fastcall *)(_UNICODE_STRING *, VOID *, _UNICODE_STRING *, _UNICODE_STRING *, VOID *, _DWORD, PVOID, UINT8, UINT64 *, INT64 *, UINT8 *))pXdvZwAccessCheckAndAuditAlarm)(
           SubsystemName,
           HandleId,
           ObjectTypeName,
           ObjectName,
           SecurityDescriptor,
           DesiredAccess,
           GenericMapping,
           ObjectCreation,
           GrantedAccess,
           AccessStatus,
           GenerateOnClose);
}

Referenced by: