NtCreateCrossVmMutant
__int64 __fastcall NtCreateCrossVmMutant(
_QWORD *a1,
unsigned int a2,
__int64 a3,
unsigned int a4,
__int64 a5,
__int64 a6){
char PreviousMode;
__int64 v9;
int v10;
__int64 v12;
v12 = 0i64;
PreviousMode = KeGetCurrentThread()->PreviousMode;
if( PreviousMode )
{
v9 = 0x7FFFFFFF0000i64;
if( (unsigned __int64)a1 < 0x7FFFFFFF0000i64 )
v9 = (__int64)a1;
*(_QWORD *)v9 = *(_QWORD *)v9;
}
v10 = ExpCreateCrossVmMutant(&v12, a2, a3, a4, a5, a6, PreviousMode);
if( v10 >= 0 )
*a1 = v12;
return(unsigned int)v10;
}Referenced by:
No references.