HalpTimerStartProfileInterrupt
NTSTATUS __stdcall HalpTimerStartProfileInterrupt(){
int v0;
unsigned int Number;
INT64 a5;
v0 = 0;
if( !HalpProfileTimer )
return -1073741637;
if( (*((_DWORD *)HalpProfileTimer + 46) & 0x80u) != 0 )
return -1073741431;
Number = KeGetPcr()->Prcb.Number;
if( (*((_DWORD *)HalpProfileTimer + 56) & 1) == 0 && Number
|| (v0 = HalpSetTimer(
(_KDPC *)HalpProfileTimer,
2ui64,
*(unsigned int *)(32i64 * Number + qword_140C4A3C8 + 24) + 1i64,
1,
(INT64)&a5),
v0 >= 0) )
{
HalpProfilingActive = 1;
}
return v0;
}Referenced by:
DefaultEnableMonitoring