KeGetExecuteOptions

NTSTATUS __stdcall KeGetExecuteOptions(_EPROCESS *Process, UINT64 *ExecuteOptions){
  _EWOW64PROCESS *WoW64Process; 
  __int8 bf_0; 
  int v5; 
  int v6; 
  int v7; 
  int v8; 
  int v9; 
  int v10; 

  WoW64Process = Process->WoW64Process;
  if( WoW64Process && WoW64Process->Machine == 332 )
  {
    bf_0 = Process->Pcb.Flags._bf_0;
    v5 = bf_0 & 1 | 2;
    if( (bf_0 & 2) == 0 )
      v5 = bf_0 & 1;
    v6 = v5 | 4;
    if( (bf_0 & 4) == 0 )
      v6 = v5;
    v7 = v6 | 8;
    if( (bf_0 & 8) == 0 )
      v7 = v6;
    v8 = v7 | 0x10;
    if( (bf_0 & 0x10) == 0 )
      v8 = v7;
    v9 = v8 | 0x20;
    if( (bf_0 & 0x20) == 0 )
      v9 = v8;
    v10 = v9 | 0x40;
    if( (bf_0 & 0x40) == 0 )
      v10 = v9;
    *(_DWORD *)ExecuteOptions = v10;
  }
  else
  {
    *(_DWORD *)ExecuteOptions = 13;
  }
  return 0;
}

Referenced by: