NtCreateCrossVmEvent
INT64 __fastcall NtCreateCrossVmEvent(_QWORD *a1, UINT64 a2, INT64 a3, UINT64 a4, INT64 a5, INT64 a6){
unsigned int v6;
CHAR a7;
__int64 v9;
int CrossVmEvent;
_QWORD a1a[2];
v6 = a2;
a1a[0] = 0i64;
a7 = *((_BYTE *)KeGetCurrentThread() + 562);
if( a7 )
{
v9 = 0x7FFFFFFF0000i64;
if( (unsigned __int64)a1 < 0x7FFFFFFF0000i64 )
v9 = (__int64)a1;
*(_QWORD *)v9 = *(_QWORD *)v9;
}
CrossVmEvent = ExpCreateCrossVmEvent(a1a, v6, a3, a4, a5, a6, a7);
if( CrossVmEvent >= 0 )
*a1 = a1a[0];
return(unsigned int)CrossVmEvent;
}Referenced by:
No references.