VfZwDuplicateToken

NTSTATUS __stdcall VfZwDuplicateToken(
        VOID *ExistingTokenHandle,
        UINT64 DesiredAccess,
        _OBJECT_ATTRIBUTES *ObjectAttributes,
        UINT8 EffectiveOnly,
        _TOKEN_TYPE TokenType,
        VOID **NewTokenHandle){
  unsigned int v8; 
  _OBJECT_ATTRIBUTES *v10; 
  __int64 v11; 
  VOID *retaddr; 

  v8 = DesiredAccess;
  if( (unsigned int)ViZwShouldCheck() )
  {
    ViZwCheckObjectAttributes(v10, retaddr);
    ViZwCheckVirtualAddress((UINT64)NewTokenHandle, retaddr);
  }
  LOBYTE(v11) = EffectiveOnly;
  return((__int64(__fastcall *)(VOID *, _QWORD, _OBJECT_ATTRIBUTES *, __int64, _TOKEN_TYPE, VOID **))pXdvZwDuplicateToken)(
           ExistingTokenHandle,
           v8,
           ObjectAttributes,
           v11,
           TokenType,
           NewTokenHandle);
}

Referenced by: