VslDebugProtectSecureProcessMemory
NTSTATUS __fastcall VslDebugProtectSecureProcessMemory(
__int64 a1,
__int64 a2,
__int64 *a3,
__int64 *a4,
unsigned int a5,
_DWORD *a6){
NTSTATUS result;
INT64 v11[14];
memset(v11, 0i64, 0x68u);
v11[1] = *(_QWORD *)(a1 + 992);
v11[3] = *a3;
v11[4] = *a4;
v11[5] = a5;
v11[2] = a2;
result = VslpEnterIumSecureMode(2u, 38, 0i64, (INT64)v11);
if( result >= 0 )
{
*a3 = v11[3];
*a4 = v11[4];
*a6 = v11[5];
}
return result;
}Referenced by:
MiProtectEnclavePages
NtProtectVirtualMemory