PspQueryProcessInterferenceCountCallback

INT64 __fastcall PspQueryProcessInterferenceCountCallback(VOID *Object, INT64 a2){
  int v2; 
  int v5; 
  __int128 v7; 
  unsigned int v8; 
  UINT64 v9; 
  v8 = 0;
  v2 = *((_DWORD *)Object + 280);
  v7 = 0i64;
  if( (v2 & 1) != 0 || !ObReferenceObjectSafeWithTag(Object, 0x624A7350ui64) )
  {
    return 0;
  }
  else
  {
    v5 = 0;
    if( ExAcquireRundownProtection((PEX_RUNDOWN_REF)Object + 139) )
    {
      LODWORD(v9) = *(_DWORD *)(*(_QWORD *)(a2 + 8) + 480i64);
      if( (unsigned int)v9 <= 0xFFFFFFFD )
      {
        *(_QWORD *)&v7 = Object;
        *((_QWORD *)&v7 + 1) = &v8;
        v5 = PsInvokeWin32Callout(24i64, &v7, 1i64, &v9);
        if( v5 >= 0 )
          **(_QWORD **)a2 += v8;
      }
      ExReleaseRundownProtection((PEX_RUNDOWN_REF)Object + 139);
    }
    ObfDereferenceObjectWithTag(Object, 0x624A7350ui64);
  }
  return(unsigned int)v5;
}

Referenced by:

No references.