ExpGetHandleInformationEx
NTSTATUS __stdcall ExpGetHandleInformationEx(PVOID SystemInformation, UINT64 SystemInformationLength, UINT64 *a3){
unsigned int v4;
NTSTATUS result;
NTSTATUS HandleInformation;
_DWORD *v7;
VOID *LockVariable;
*(_DWORD *)a3 = 0;
v7 = 0i64;
v4 = SystemInformationLength;
LockVariable = 0i64;
result = ExLockUserBuffer(
SystemInformation,
SystemInformationLength,
KeGetCurrentThread()->PreviousMode,
IoWriteAccess,
(VOID **)&v7,
&LockVariable);
if( result >= 0 )
{
HandleInformation = ObGetHandleInformationEx(v7, v4, a3);
ExUnlockUserBuffer(LockVariable);
return HandleInformation;
}
return result;
}Referenced by:
ExpQuerySystemInformation