VfZwQueryInformationToken
NTSTATUS __stdcall VfZwQueryInformationToken(
VOID *TokenHandle,
_TOKEN_INFORMATION_CLASS TokenInformationClass,
VOID *TokenInformation,
UINT64 TokenInformationLength,
ULONG_PTR ReturnLength){
unsigned int v5;
UINT64 v9;
VOID *retaddr;
v5 = TokenInformationLength;
if( (unsigned int)ViZwShouldCheck() )
{
ViZwCheckVirtualAddress(v9, retaddr);
ViZwCheckVirtualAddress(*(UINT64 *)&ReturnLength, retaddr);
}
return((__int64(__fastcall *)(VOID *, _QWORD, VOID *, _QWORD, _QWORD))pXdvZwQueryInformationToken)(
TokenHandle,
(unsigned int)TokenInformationClass,
TokenInformation,
v5,
*(_QWORD *)&ReturnLength);
}Referenced by:
No references.