VOID __stdcall PsQueryProcessAttributes(_EPROCESS *Process, UINT8 *SystemAppIdentifier, UINT8 *PackagedApplication){
VOID *v6;
v6 = PsReferencePrimaryToken(Process);
PsQueryProcessAttributesByToken(v6, SystemAppIdentifier, PackagedApplication);
ObFastDereferenceObject(&Process->Token, v6);
}