NtResumeProcess

NTSTATUS __stdcall NtResumeProcess(PVOID ProcessHandle){
  NTSTATUS v1; 
  PVOID Object; 
  Object = 0i64;
  v1 = ObReferenceObjectByHandleWithTag(
         ProcessHandle,
         0x800u,
         (POBJECT_TYPE)PsProcessType,
         *((_BYTE *)KeGetCurrentThread() + 562),
         0x75537350u,
         &Object,
         0i64);
  if( v1 >= 0 )
  {
    v1 = PsResumeProcess((__int64)Object);
    ObfDereferenceObjectWithTag(Object, 0x75537350ui64);
  }
  return v1;
}

Referenced by: