VfZwMapViewOfSection

NTSTATUS __stdcall VfZwMapViewOfSection(
        VOID *SectionHandle,
        VOID *ProcessHandle,
        VOID **BaseAddress,
        UINT64 ZeroBits,
        UINT64 CommitSize,
        ULONG_PTR SectionOffset,
        ULONG_PTR ViewSize,
        _SECTION_INHERIT InheritDisposition,
        UINT64 AllocationType,
        UINT64 Win32Protect){
  VOID *retaddr; 

  VfCheckPageProtection((unsigned int)Win32Protect, retaddr);
  if( (unsigned int)ViZwShouldCheck() )
  {
    ViZwCheckVirtualAddress((UINT64)BaseAddress, retaddr);
    ViZwCheckVirtualAddress(*(UINT64 *)&SectionOffset, retaddr);
    ViZwCheckVirtualAddress(*(UINT64 *)&ViewSize, retaddr);
  }
  return((__int64(__fastcall *)(VOID *, VOID *, VOID **, UINT64, UINT64, _QWORD, _QWORD, _SECTION_INHERIT, _DWORD, _DWORD))pXdvZwMapViewOfSection)(
           SectionHandle,
           ProcessHandle,
           BaseAddress,
           ZeroBits,
           CommitSize,
           *(_QWORD *)&SectionOffset,
           *(_QWORD *)&ViewSize,
           InheritDisposition,
           AllocationType,
           Win32Protect);
}

Referenced by: