VslDebugProtectSecureProcessMemory
NTSTATUS __fastcall VslDebugProtectSecureProcessMemory(INT64 a1, INT64 a2, INT64 *a3, INT64 *a4, UINT64 a5, _DWORD *a6){
NTSTATUS v10;
INT64 result[3];
INT64 v12;
INT64 v13;
__int64 v14;
memset((INT64)result, 0i64);
result[1] = *(_QWORD *)(a1 + 992);
v12 = *a3;
v13 = *a4;
v14 = (unsigned int)a5;
result[2] = a2;
v10 = VslpEnterIumSecureMode(2u, 38, 0i64, (INT64)result);
if( v10 >= 0 )
{
*a3 = v12;
*a4 = v13;
*a6 = v14;
}
return v10;
}Referenced by:
MiProtectEnclavePages
NtProtectVirtualMemory