ViKeInjectStatusAlerted
UINT64 __stdcall ViKeInjectStatusAlerted(UINT8 Alertable){
_EPROCESS *v1;
UINT64 result;
result = 0;
if( Alertable )
{
v1 = (_EPROCESS *)*((_QWORD *)KeGetCurrentThread() + 23);
if( PsInitialSystemProcess )
{
if( v1 != (_EPROCESS *)PsInitialSystemProcess
&& v1 != PsIdleProcess
&& (unsigned int)VfFaultsInjectResourceFailure(0i64)
&& !(unsigned int)VfUtilIsLocalSystem(v1) )
{
return 1;
}
}
}
return result;
}Referenced by:
VerifierKeDelayExecutionThread
ViKeWaitForMultipleObjectsCommon
ViKeWaitForSingleObjectCommon