ObOpenObjectByName
NTSTATUS __fastcall ObOpenObjectByName(__int64 a1, __int64 a2, char a3, __int64 a4, DWORD a5, __int64 a6, _QWORD *a7){
_EJOB *Silo;
UINT64 DesiredAccess;
Silo = PsGetCurrentSilo();
LODWORD(DesiredAccess) = a5;
return ObOpenObjectByNameEx(
(_OBJECT_ATTRIBUTES *)a1,
(_OBJECT_TYPE *)a2,
a3,
(_ACCESS_STATE *)a4,
DesiredAccess,
(PVOID)a6,
Silo,
(PVOID *)a7);
}Referenced by:
CmCreateKey
CmInitSystem1
CmOpenKey
CmpCreatePredefined
CmpDoReOpenTransKey
CmpLinkHiveToMaster
IopLoadDriver
IopReferenceDriverObjectByName
IopUnloadDriver
NtOpenDirectoryObject
NtOpenEvent
NtOpenIoCompletion
NtOpenJobObject
NtOpenKeyedEvent
NtOpenMutant
NtOpenPartition
NtOpenRegistryTransaction
NtOpenSection
NtOpenSemaphore
NtOpenSession
NtOpenTimer