PspWow64PickBestNtdll
INT64 __fastcall PspWow64PickBestNtdll(INT64 a1){
int v1;
INT64 *SystemDllInfo;
unsigned int v3;
__int16 v4;
int v5;
INT64 *v6;
unsigned int v7;
__int16 v8;
if( a1 && *(char *)(a1 + 9) < 0 )
{
v1 = 0;
while( 1 )
{
SystemDllInfo = PsQuerySystemDllInfo(v1);
if( SystemDllInfo )
{
if( (*(_DWORD *)SystemDllInfo & 4) != 0 && *((_WORD *)SystemDllInfo + 1) == v4 )
return v3;
}
v1 = v3 + 1;
if( v1 >= 6 )
goto LABEL_7;
}
}
else
{
LABEL_7:
v5 = 0;
while( 1 )
{
v6 = PsQuerySystemDllInfo(v5);
if( v6 )
{
if( *((_WORD *)v6 + 1) == v8 )
break;
}
v5 = v7 + 1;
if( v5 >= 6 )
return 0i64;
}
return v7;
}
}Referenced by:
PspAllocateProcess