NtCreateSection

NTSTATUS __fastcall NtCreateSection(
        UINT64 a1,
        UINT64 a2,
        INT64 a3,
        INT64 *a4,
        INT64 SectionPageProtection,
        INT64 AllocationAttributes,
        UINT64 FileHandle){
  int v7; 
  int v8; 
  __int128 *Address; 
  INT64 v11; 
  INT64 v12; 
  ULONGLONG ullMultiplicand; 
  INT64 v14; 
  __int128 v15; 

  v7 = AllocationAttributes;
  v8 = 0;
  Address = 0i64;
  v15 = 0i64;
  if( (AllocationAttributes & 0x7F) != 0 )
  {
    v7 = AllocationAttributes & 0xFFFFFF80;
    *(_QWORD *)&v15 = 2i64;
    *((_QWORD *)&v15 + 1) = (unsigned int)(AllocationAttributes & 0x7F) - 1;
    Address = &v15;
    v8 = 1;
  }
  LODWORD(v14) = 1;
  LODWORD(ullMultiplicand) = v8;
  LODWORD(v12) = v7;
  LODWORD(v11) = SectionPageProtection;
  return MiCreateSectionCommon(a1, a2, a3, (INT64)a4, v11, v12, FileHandle, Address, ullMultiplicand, v14);
}

Referenced by: