NtOpenJobObject

NTSTATUS __stdcall NtOpenJobObject(PVOID *JobHandle, UINT64 DesiredAccess, _OBJECT_ATTRIBUTES *ObjectAttributes){
  DWORD v4; 
  char v6; 
  __int64 v7; 
  int v8; 
  void *v10; 
  v4 = DesiredAccess;
  v10 = 0i64;
  v6 = *((_BYTE *)KeGetCurrentThread() + 562);
  if( v6 )
  {
    v7 = 0x7FFFFFFF0000i64;
    if( (unsigned __int64)JobHandle < 0x7FFFFFFF0000i64 )
      v7 = (__int64)JobHandle;
    *(_QWORD *)v7 = *(_QWORD *)v7;
  }
  v8 = ObOpenObjectByName((__int64)ObjectAttributes, (__int64)PsJobType, v6, 0i64, v4, 0i64, &v10);
  if( v8 >= 0 )
    *JobHandle = v10;
  return v8;
}

Referenced by: