INT64 __fastcall VmPauseResumeNotify(int a1){ INT64 v2; v2 = *(_QWORD *)(*((_QWORD *)KeGetCurrentThread() + 23) + 2288i64); if( v2 ) return VmpPauseResumeNotify(v2, (unsigned int)a1); else return 3221225608i64; }