ExpQueryCrossVmEvent

NTSTATUS __stdcall ExpQueryCrossVmEvent(INT64 a1, INT64 a2, INT64 a3){
  UINT64 ExtensionHostForCrossVmObject; 
  NTSTATUS v7; 
  _EX_RUNDOWN_REF *v9; 

  v9 = 0i64;
  ExtensionHostForCrossVmObject = ExpGetExtensionHostForCrossVmObject(a1, (INT64 *)&v9);
  if( !ExtensionHostForCrossVmObject )
    return -1073741822;
  v7 = (*(__int64(__fastcall **)(INT64, INT64, INT64))(ExtensionHostForCrossVmObject + 16))(a1, a2, a3);
  ExReleaseExtensionTable(v9);
  return v7;
}

Referenced by:

NtQueryEvent