NtCreateProcess
NTSTATUS __stdcall NtCreateProcess(
PVOID *ProcessHandle,
UINT64 DesiredAccess,
_OBJECT_ATTRIBUTES *ObjectAttributes,
PVOID ParentProcess,
UINT8 InheritObjectTable,
PVOID SectionHandle,
PVOID DebugPort,
PVOID TokenHandle){
int v9;
int v10;
UINT64 Flags;
UINT64 v13;
v9 = (unsigned __int8)SectionHandle & 1 | 2;
if( ((unsigned __int8)DebugPort & 1) == 0 )
v9 = (unsigned __int8)SectionHandle & 1;
v10 = v9 | 4;
if( !InheritObjectTable )
v10 = v9;
LODWORD(v13) = 0;
LODWORD(Flags) = v10;
return NtCreateProcessEx(
ProcessHandle,
DesiredAccess,
ObjectAttributes,
ParentProcess,
Flags,
SectionHandle,
DebugPort,
TokenHandle,
v13);
}Referenced by:
No references.