ExpGetHandleInformation

NTSTATUS __stdcall ExpGetHandleInformation(PVOID SystemInformation, UINT64 SystemInformationLength, UINT64 *a3){
  unsigned int v4; 
  NTSTATUS result; 
  NTSTATUS HandleInformation; 
  _DWORD *a1; 
  PVOID P; 
  *(_DWORD *)a3 = 0;
  a1 = 0i64;
  v4 = SystemInformationLength;
  P = 0i64;
  result = ExLockUserBuffer(
             SystemInformation,
             SystemInformationLength,
             *((_BYTE *)KeGetCurrentThread() + 562),
             IoWriteAccess,
             (VOID **)&a1,
             &P);
  if( result >= 0 )
  {
    HandleInformation = ObGetHandleInformation(a1, v4, a3);
    ExUnlockUserBuffer(P);
    return HandleInformation;
  }
  return result;
}

Referenced by: