NtAcquireCrossVmMutant
INT64 __fastcall NtAcquireCrossVmMutant(VOID *a1, UINT64 a2){
KPROCESSOR_MODE v3;
__int64 *v4;
UINT64 v5;
int v6;
PVOID Object;
__int64 v8;
v8 = 0i64;
if( !ExCrossVmMutantObjectType )
return 3221225508i64;
v3 = *((_BYTE *)KeGetCurrentThread() + 562);
v4 = (__int64 *)a2;
if( a2 && v3 )
{
v5 = 0x7FFFFFFF0000i64;
if( a2 < 0x7FFFFFFF0000i64 )
v5 = a2;
v8 = *(_QWORD *)v5;
v4 = &v8;
}
Object = 0i64;
v6 = ObReferenceObjectByHandle(a1, 0x100000u, ExCrossVmMutantObjectType, v3, &Object, 0i64);
if( v6 >= 0 )
{
v6 = ExpAcquireCrossVmMutant((INT64)Object, (INT64)v4, v3);
HalPutDmaAdapter((PADAPTER_OBJECT)Object);
}
return(unsigned int)v6;
}Referenced by:
No references.