PsIumGetOnDemandDebugChallenge
__int64 __fastcall PsIumGetOnDemandDebugChallenge(VOID *a1, VOID *a2, size_t a3, _DWORD *a4){
NTSTATUS v7;
UINT64 Tag;
PVOID Object;
Object = 0i64;
LODWORD(Tag) = 2035381072;
v7 = ObReferenceObjectByHandleWithTag(
a1,
0x1000ui64,
(_OBJECT_TYPE *)PsProcessType,
KeGetCurrentThread()->PreviousMode,
Tag,
&Object,
0i64);
if( v7 >= 0 )
{
v7 = VslGetOnDemandDebugChallenge((__int64)Object, a2, a3, a4);
ObfDereferenceObjectWithTag(Object, 0x79517350ui64);
}
return(unsigned int)v7;
}Referenced by:
NtQueryInformationProcess