IoCreateFile
NTSTATUS __stdcall IoCreateFile(
VOID **FileHandle,
UINT64 DesiredAccess,
_OBJECT_ATTRIBUTES *ObjectAttributes,
_IO_STATUS_BLOCK *IoStatusBlock,
_LARGE_INTEGER *AllocationSize,
UINT64 FileAttributes,
UINT64 ShareAccess,
UINT64 Disposition,
UINT64 CreateOptions,
VOID *EaBuffer,
UINT64 EaLength,
_CREATE_FILE_TYPE CreateFileType,
VOID *InternalParameters,
UINT64 Options){
UINT64 v15;
UINT64 v16;
UINT64 v17;
UINT64 v18;
UINT64 v19;
UINT64 v20;
UINT64 v21;
LODWORD(v21) = 0;
LODWORD(v20) = Options;
LODWORD(v19) = EaLength;
LODWORD(v18) = CreateOptions;
LODWORD(v17) = Disposition;
LODWORD(v16) = ShareAccess;
LODWORD(v15) = FileAttributes;
return IopCreateFile(
FileHandle,
DesiredAccess,
ObjectAttributes,
IoStatusBlock,
AllocationSize,
v15,
v16,
v17,
v18,
EaBuffer,
v19,
CreateFileType,
InternalParameters,
v20,
v21,
0i64);
}Referenced by:
IopInitCrashDumpRegCallback
MiCreatePagingFile
NtCreateMailslotFile
NtCreateNamedPipeFile
SmKmStoreFileCreateForIoType