ZwCreateFile

NTSTATUS __stdcall ZwCreateFile(
        PVOID *FileHandle,
        UINT64 DesiredAccess,
        OBJECT_ATTRIBUTES *ObjectAttributes,
        IO_STATUS_BLOCK *IoStatusBlock,
        LARGE_INTEGER *AllocationSize,
        UINT64 FileAttributes,
        UINT64 ShareAccess,
        UINT64 CreateDisposition,
        UINT64 CreateOptions,
        PVOID EaBuffer,
        UINT64 EaLength){
  NTSTATUS result; 
  _disable();
  __readeflags();
  KiServiceInternal();
  return result;
}

Referenced by: