PfProcessCreateNotification

__int64 __fastcall PfProcessCreateNotification(__int64 a1, __int64 a2){
  UINT64 v3; 
  PVOID P; 
  if( !a2 )
    return 3221225659i64;
  P = 0i64;
  if( (dword_140C4F908 & 1) != 0 || (dword_140C50130 & 1) != 0 )
  {
    PfCalculateProcessHash(a1, (unsigned __int64)&P + 1);
    if( (dword_140C50130 & 1) != 0 )
    {
      v3 = *(unsigned int *)(a1 + 1524);
      if( (_DWORD)v3 )
      {
        if( (unsigned int)PfCheckDeprioritizeImage(v3) )
          _InterlockedOr((volatile signed __int32 *)(a1 + 1124), 0x4000u);
      }
    }
  }
  PfSnBeginAppLaunch((_DWORD *)a1, (unsigned __int16 *)P, 0);
  if( P )
    ExFreePoolWithTag(P, 0);
  return 0i64;
}

Referenced by: