ObReferenceProcessHandleTable

unsigned __int64 __fastcall ObReferenceProcessHandleTable(struct _EX_RUNDOWN_REF *a1){
  struct _EX_RUNDOWN_REF *v1; 
  unsigned __int64 Count; 
  v1 = a1 + 139;
  Count = 0i64;
  if( ExAcquireRundownProtection(a1 + 139) )
  {
    Count = a1[174].Count;
    if( !Count )
      ExReleaseRundownProtection(v1);
  }
  return Count;
}

Referenced by: