VfZwQueryInformationThread

NTSTATUS __stdcall VfZwQueryInformationThread(
        VOID *ThreadHandle,
        _THREADINFOCLASS ThreadInformationClass,
        VOID *ThreadInformation,
        UINT64 ThreadInformationLength,
        ULONG_PTR ReturnLength){
  unsigned int v5; 
  UINT64 v9; 
  VOID *retaddr; 

  v5 = ThreadInformationLength;
  if( (unsigned int)ViZwShouldCheck() )
  {
    ViZwCheckVirtualAddress(v9, retaddr);
    ViZwCheckVirtualAddress(*(UINT64 *)&ReturnLength, retaddr);
  }
  return((__int64(__fastcall *)(VOID *, _QWORD, VOID *, _QWORD, _QWORD))pXdvZwQueryInformationThread)(
           ThreadHandle,
           (unsigned int)ThreadInformationClass,
           ThreadInformation,
           v5,
           *(_QWORD *)&ReturnLength);
}

Referenced by: