ExpSetTimer2
NTSTATUS __fastcall ExpSetTimer2(_HANDLE Handle, INT64 a2, INT64 a3, UINT64 a4){
UINT64 v4;
char PreviousMode;
NTSTATUS result;
PVOID Object;
__int128 v8;
v8 = 0i64;
if( a2 )
{
if( KeGetCurrentThread()->PreviousMode )
{
v4 = a4;
if( a4 )
{
if( a4 >= 0x7FFFFFFF0000i64 )
v4 = 0x7FFFFFFF0000i64;
v8 = *(_OWORD *)v4;
}
}
}
PreviousMode = KeGetCurrentThread()->PreviousMode;
Object = 0i64;
result = ObReferenceObjectByHandle(*(VOID **)&Handle, 2ui64, ExpIRTimerObjectType, PreviousMode, &Object, 0i64);
if( result >= 0 )
return ExpSetTimerObject2(Object);
return result;
}Referenced by:
NtCancelTimer2
NtSetIRTimer
NtSetTimer2