ProbeForWrite
NTSTATUS __fastcall ProbeForWrite(UINT64 a1, INT64 a2, INT64 a3){
UINT64 v3;
unsigned __int64 v4;
NTSTATUS result;
if( a2 )
{
if( (((_DWORD)a3 - 1) & (unsigned int)a1) != 0 )
ExRaiseDatatypeMisalignment();
v3 = a1 + a2 - 1;
if( a1 > v3 || v3 >= 0x7FFFFFFF0000i64 )
ExRaiseAccessViolation();
v4 = (v3 & 0xFFFFFFFFFFFFF000ui64) + 4096;
do
{
result = *(unsigned __int8 *)a1;
*(_BYTE *)a1 = result;
a1 = (a1 & 0xFFFFFFFFFFFFF000ui64) + 4096;
}
while( a1 != v4 );
}
return result;
}Referenced by:
AlpcpCaptureAttributes
AlpcpProbeMessageAttributes
AlpcpProcessSynchronousRequest
AlpcpReceiveMessage
BuildQueryDirectoryIrp
EtwQueryProcessTelemetryInfo
EtwpGetLoggerInfoFromContext
EtwpRealtimeConnect
EtwpSetCoverageSamplerInformation
ExHandleSPCall2
ExpGetDeviceDataInformation
ExpGetSystemPlatformBinary
ExpProfileCreate
ExpQuerySystemInformation
IopValidateQueryInformationParameters
IopXxxControlFile
KdpPrompt
KiDispatchException
KiInitializeUserApc
KiTpAccessMemory
LpcpCopyRequestData
MiAllocateUserPhysicalPages
MiCaptureAllocateMapExtendedParameters
MiCaptureSectionCreateExtendedParameters
MiQueryMemoryPhysicalContiguity
MmManagePartitionNodeInformation
MmQueryVirtualMemory
NtAdjustGroupsToken
NtAdjustPrivilegesToken
NtAlpcQueryInformationMessage
NtConvertBetweenAuxiliaryCounterAndPerformanceCounter
NtEnumerateBootEntries
NtEnumerateDriverEntries
NtEnumerateKey
NtEnumerateSystemEnvironmentValuesEx
NtGetCachedSigningLevel
NtGetCompleteWnfStateSubscription
NtGetCurrentProcessorNumberEx
NtGetMUIRegistryInfo
NtGetWriteWatch
NtManageHotPatch
NtManagePartition
NtNotifyChangeDirectoryFileEx
NtNotifyChangeMultipleKeys
NtPowerInformation
NtPrivilegeCheck
NtPssCaptureVaSpaceBulk
NtQueryAuxiliaryCounterFrequency
NtQueryBootEntryOrder
NtQueryBootOptions
NtQueryDirectoryObject
NtQueryDriverEntryOrder
NtQueryEaFile
NtQueryEvent
NtQueryInformationAtom
NtQueryInformationPort
NtQueryInformationThread
NtQueryInformationToken
NtQueryLicenseValue
NtQueryMultipleValueKey
NtQueryMutant
NtQueryObject
NtQueryOpenSubKeysEx
NtQueryQuotaInformationFile
NtQuerySection
NtQuerySecurityAttributesToken
NtQuerySecurityObject
NtQuerySecurityPolicy
NtQuerySymbolicLinkObject
NtQuerySystemEnvironmentValue
NtQuerySystemEnvironmentValueEx
NtQueryVolumeInformationFile
NtQueryWnfStateData
NtQueryWnfStateNameInformation
NtReadFile
NtRemoveIoCompletionEx
NtSecureConnectPort
NtSetInformationProcess
NtSetInformationVirtualMemory
NtSubscribeWnfStateChange
NtSystemDebugControl
NtTraceControl
NtTranslateFilePath
NtWaitForWorkViaWorkerFactory
ObQueryRefTraceInformation
PfGetCompletedTrace
PfQuerySuperfetchInformation
PfSnGetCompletedTrace
PfpMemoryListQuery
PfpMemoryRangesQuery
PfpPfnPrioRequest
PfpPrefetchRequest
PfpPrivSourceEnum
PfpQueryFileExtentsRequest
PfpQueryGpuUtilization
PiCMReturnBasicResultData
PiCMReturnBufferResultData
PiCMReturnDepthResultData
PiCMReturnHandleResultData
PiCMReturnStatusResultData
PiControlCopyUserModeCallersBuffer
PiDqIrpQueryGetResult
PopBootStatCheckIntegrity
PopBootStatGet
PsQueryCpuQuotaInformation
PspInitializeThunkContext
PspWow64ReadOrWriteThreadCpuArea
RtlpWriteExtendedContext
SeAccessCheckByTypeWithAdminlessChecks
SepAccessCheckAndAuditAlarmWithAdminlessChecks
SmProcessListRequest
WbUpdateHeapExecutedCallArgumentList