PspQueryProcessInterferenceCountCallback
INT64 __fastcall PspQueryProcessInterferenceCountCallback(VOID *Object, INT64 a2){
int v2;
int v5;
__int128 v7;
unsigned int v8;
UINT64 v9;
v8 = 0;
v2 = *((_DWORD *)Object + 280);
v7 = 0i64;
if( (v2 & 1) != 0 || !ObReferenceObjectSafeWithTag(Object, 0x624A7350ui64) )
{
return 0;
}
else
{
v5 = 0;
if( ExAcquireRundownProtection((PEX_RUNDOWN_REF)Object + 139) )
{
LODWORD(v9) = *(_DWORD *)(*(_QWORD *)(a2 + 8) + 480i64);
if( (unsigned int)v9 <= 0xFFFFFFFD )
{
*(_QWORD *)&v7 = Object;
*((_QWORD *)&v7 + 1) = &v8;
v5 = PsInvokeWin32Callout(24i64, &v7, 1i64, &v9);
if( v5 >= 0 )
**(_QWORD **)a2 += v8;
}
ExReleaseRundownProtection((PEX_RUNDOWN_REF)Object + 139);
}
ObfDereferenceObjectWithTag(Object, 0x624A7350ui64);
}
return(unsigned int)v5;
}Referenced by:
No references.