PspTrySetProcessPebThrottlingFlags
void __fastcall PspTrySetProcessPebThrottlingFlags(ULONG_PTR a1, char a2){
__int64 v4;
__int64 v5;
__int64 *v6;
_KAPC_STATE ApcState;
memset(&ApcState, 0, sizeof(ApcState));
KiStackAttachProcess((_KPROCESS *)a1, 0i64, &ApcState);
v4 = *(_QWORD *)(a1 + 1360);
if( v4 )
{
v5 = 0i64;
v6 = *(__int64 **)(a1 + 1408);
if( v6 )
v5 = *v6;
if( a2 )
{
_InterlockedOr((volatile signed __int32 *)(v4 + 80), 0x60u);
if( v5 )
_InterlockedOr((volatile signed __int32 *)(v5 + 40), 0x60u);
}
else
{
_InterlockedAnd((volatile signed __int32 *)(v4 + 80), 0xFFFFFFBF);
if( v5 )
_InterlockedAnd((volatile signed __int32 *)(v5 + 40), 0xFFFFFFBF);
}
}
KiUnstackDetachProcess(&ApcState, 0i64);
}Referenced by:
No references.