VfZwNotifyChangeKey

NTSTATUS __stdcall VfZwNotifyChangeKey(
        VOID *KeyHandle,
        VOID *Event,
        VOID *ApcRoutine,
        VOID *a4,
        _IO_STATUS_BLOCK *Address,
        UINT64 a6,
        VOID *ApcContext,
        _IO_STATUS_BLOCK *IoStatusBlock,
        UINT64 CompletionFilter,
        UINT8 WatchTree,
        VOID *Buffer,
        UINT64 BufferSize,
        UINT8 Asynchronous){
  UINT64 v17; 
  UINT64 v19; 
  char v20; 
  VOID *retaddr; 

  if( (unsigned int)ViZwShouldCheck() )
  {
    if( v17 )
    {
      ViZwCheckVirtualAddress(v17, retaddr);
      if( (unsigned int)a4 > 6 && (unsigned int)((_DWORD)a4 - 32) > 0x1F )
        VerifierBugCheckIfAppropriate(0xC4ui64, 0xFCu, (ULONG_PTR)retaddr, (ULONG_PTR)a4, 0, v19);
    }
    ViZwCheckVirtualAddress((UINT64)Address, retaddr);
    ViZwCheckVirtualAddress((UINT64)IoStatusBlock, retaddr);
  }
  v20 = (char)ApcContext;
  return((__int64(__fastcall *)(VOID *, VOID *, VOID *, VOID *, _IO_STATUS_BLOCK *, _DWORD, char, _IO_STATUS_BLOCK *, _DWORD, UINT8))pXdvZwNotifyChangeKey)(
           KeyHandle,
           Event,
           ApcRoutine,
           a4,
           Address,
           a6,
           v20,
           IoStatusBlock,
           CompletionFilter,
           WatchTree);
}

Referenced by: