NtOpenPartition

NTSTATUS __stdcall NtOpenPartition(VOID **PartitionHandle, UINT64 DesiredAccess, _OBJECT_ATTRIBUTES *ObjectAttributes){
  char PreviousMode; 
  __int64 v5; 
  NTSTATUS result; 
  UINT64 DesiredAccessa; 
  VOID *Handle; 

  Handle = 0i64;
  PreviousMode = KeGetCurrentThread()->PreviousMode;
  if( PreviousMode )
  {
    v5 = 0x7FFFFFFF0000i64;
    if( (unsigned __int64)PartitionHandle < 0x7FFFFFFF0000i64 )
      v5 = (__int64)PartitionHandle;
    *(_QWORD *)v5 = *(_QWORD *)v5;
  }
  LODWORD(DesiredAccessa) = DesiredAccess;
  result = ObOpenObjectByName(ObjectAttributes, PsPartitionType, PreviousMode, 0i64, DesiredAccessa, 0i64, &Handle);
  if( result >= 0 )
    *PartitionHandle = Handle;
  return result;
}

Referenced by: