Skip to content

Instantly share code, notes, and snippets.

@alexplaskett
Created July 15, 2021 10:46
Embed
What would you like to do?
NtfsCommonQueryEa
if ( (_DWORD)out_buf_length )
{
out_buf = (PVOID)NtfsMapUserBuffer(a2, 16i64);
v28 = out_buf;
v16 = (unsigned int)out_buf_length;
if ( *(_BYTE *)(a2 + 64) )
{
v35 = out_buf;
out_buf = ExAllocatePoolWithTag((POOL_TYPE)(PoolType | 0x10), (unsigned int)out_buf_length, 0x4546744Eu);
v28 = out_buf;
v24 = 1;
v16 = out_buf_length;
}
memset(out_buf, 0, v16);
v15 = v43;
LOBYTE(v12) = v25;
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment