NtQuerySystemInformation
void __fastcall NtQuerySystemInformation(UINT64 a1, INT64 a2, int a3, UINT64 *a4){
__int16 *p_Group;
UINT64 v6;
UINT64 Length;
__int16 Group;
p_Group = 0i64;
Group = 0;
if( (int)a1 < 74 || (int)a1 >= 83 )
{
switch( (int)a1 )
{
case 8:
case 23:
case 42:
case 61:
case 83:
case 100:
case 108:
case 141:
Group = KeGetCurrentPrcb()->Group;
goto LABEL_7;
case 73:
LABEL_7:
p_Group = &Group;
v6 = 2i64;
goto LABEL_4;
case 107:
case 121:
case 180:
case 210:
case 211:
return;
default:
break;
}
}
v6 = 0i64;
LABEL_4:
LODWORD(Length) = a3;
ExpQuerySystemInformation(a1, p_Group, v6, a2, Length, a4);
}Referenced by:
AlpcpInitSystem
HalpTimerConfigureQpcBypass