ExpGetHandleInformationEx

NTSTATUS __stdcall ExpGetHandleInformationEx(PVOID SystemInformation, UINT64 SystemInformationLength, UINT64 *a3){
  unsigned int v4; 
  NTSTATUS result; 
  NTSTATUS HandleInformation; 
  _DWORD *v7; 
  VOID *LockVariable; 

  *(_DWORD *)a3 = 0;
  v7 = 0i64;
  v4 = SystemInformationLength;
  LockVariable = 0i64;
  result = ExLockUserBuffer(
             SystemInformation,
             SystemInformationLength,
             KeGetCurrentThread()->PreviousMode,
             IoWriteAccess,
             (VOID **)&v7,
             &LockVariable);
  if( result >= 0 )
  {
    HandleInformation = ObGetHandleInformationEx(v7, v4, a3);
    ExUnlockUserBuffer(LockVariable);
    return HandleInformation;
  }
  return result;
}

Referenced by:

ExpQuerySystemInformation