PsWow64GetProcessNtdllType
NTSTATUS __stdcall PsWow64GetProcessNtdllType(INT64 a1){
__int64 v1;
v1 = *(_QWORD *)(a1 + 1408);
if( v1 )
LODWORD(v1) = *(_DWORD *)(v1 + 12);
return v1;
}Referenced by:
DbgkCreateThread
DbgkSendSystemDllMessages
PsMapSystemDlls
PsThawProcess
PspAllocateProcess
PspPrepareSystemDllInitBlock
PspSetupUserProcessAddressSpace
PspWow64InitThread