DbgkpSuppressDbgMsg
UINT64 __stdcall DbgkpSuppressDbgMsg(_TEB *Teb){
_EWOW64PROCESS *WoW64Process;
unsigned __int16 Machine;
unsigned int v5;
v5 = 0;
if( SLOBYTE(Teb->SameTebFlags) >= 0 )
{
if( KeGetCurrentThread()->ApcState.Process->WoW64Process )
{
WoW64Process = KeGetCurrentThread()->ApcState.Process->WoW64Process;
if( WoW64Process )
{
Machine = WoW64Process->Machine;
if( Machine == 332 || Machine == 452 )
return SBYTE2(Teb[1].BStoreLimit) < 0;
}
}
}
else
{
return 1;
}
return v5;
}Referenced by:
DbgkMapViewOfSection
DbgkUnMapViewOfSection