http://valinet6l6tq6d5yohaa6gdsf2ho4qcqcxyj2nahp5kd4z7nsa6ycdqd.onion/2022/08/29/Working-with-shadow-copies-is-kind-of-broken-on-Windows-11-22H2.html
hEvent ) { printf ( "CreateEventW: 0x%x \n " , GetLastError ()); return 0 ; } typedef struct _IO_STATUS_BLOCK { union { NTSTATUS Status ; PVOID Pointer ; }; ULONG_PTR Information ; } IO_STATUS_BLOCK , * PIO_STATUS_BLOCK ; NTSTATUS ( * NtFsControlFile )( HANDLE FileHandle , HANDLE Event , PVOID ApcRoutine , PVOID ApcContext , PIO_STATUS_BLOCK IoStatusBlock , ULONG FsControlCode , PVOID InputBuffer , ULONG InputBufferLength , PVOID OutputBuffer , ULONG OutputBufferLength ) = GetProcAddress (...