VfZwQueryEaFile

INT64 __stdcall VfZwQueryEaFile(
        VOID *FileHandle,
        IO_STATUS_BLOCK *IoStatusBlock,
        VOID *Buffer,
        UINT64 Length,
        UINT8 ReturnSingleEntry,
        VOID *EaList,
        UINT64 EaListLength,
        UINT64 *EaIndex,
        UINT8 RestartScan){
  unsigned int v9; 
  UINT64 v13; 
  PVOID retaddr; 
  v9 = Length;
  if( (unsigned int)ViZwShouldCheck() )
  {
    ViZwCheckVirtualAddress(v13, retaddr);
    ViZwCheckVirtualAddress((UINT64)EaList, retaddr);
    ViZwCheckVirtualAddress((UINT64)EaIndex, retaddr);
  }
  return((__int64(__fastcall *)(VOID *, IO_STATUS_BLOCK *, VOID *, _QWORD, UINT8, VOID *, _DWORD, UINT64 *, UINT8))pXdvZwQueryEaFile)(
           FileHandle,
           IoStatusBlock,
           Buffer,
           v9,
           ReturnSingleEntry,
           EaList,
           EaListLength,
           EaIndex,
           RestartScan);
}

Referenced by: