VfZwQueryInformationFile

NTSTATUS __stdcall VfZwQueryInformationFile(
        VOID *FileHandle,
        ULONG_PTR IoStatusBlock,
        VOID *FileInformation,
        UINT64 FileInformationClass,
        _FILE_INFORMATION_CLASS FileInformationClassa){
  unsigned int v5; 
  UINT64 v7; 
  VOID *retaddr; 

  v5 = FileInformationClass;
  v7 = *(_QWORD *)&IoStatusBlock;
  if( (unsigned int)ViZwShouldCheck() )
  {
    ViZwCheckVirtualAddress(v7, retaddr);
    ViZwCheckVirtualAddress((UINT64)FileInformation, retaddr);
  }
  return((__int64(__fastcall *)(VOID *, UINT64, VOID *, _QWORD, _FILE_INFORMATION_CLASS))pXdvZwQueryInformationFile)(
           FileHandle,
           v7,
           FileInformation,
           v5,
           FileInformationClassa);
}

Referenced by: