PsIumGetOnDemandDebugChallenge
INT64 __fastcall PsIumGetOnDemandDebugChallenge(VOID *a1, UINT8 *a2, UINT64 a3, _DWORD *a4){
unsigned int v5;
int v7;
PVOID Object;
v5 = a3;
Object = 0i64;
v7 = ObReferenceObjectByHandleWithTag(
a1,
0x1000u,
(POBJECT_TYPE)PsProcessType,
*((_BYTE *)KeGetCurrentThread() + 562),
0x79517350u,
&Object,
0i64);
if( v7 >= 0 )
{
v7 = VslGetOnDemandDebugChallenge((INT64)Object, a2, v5, a4);
ObfDereferenceObjectWithTag(Object, 0x79517350ui64);
}
return(unsigned int)v7;
}Referenced by:
NtQueryInformationProcess