NtOpenJobObject

NTSTATUS __stdcall NtOpenJobObject(VOID **JobHandle, UINT64 DesiredAccess, _OBJECT_ATTRIBUTES *ObjectAttributes){
  int v4; 
  char PreviousMode; 
  __int64 v7; 
  int v8; 
  UINT64 DesiredAccessa; 
  VOID *Handle; 

  v4 = DesiredAccess;
  Handle = 0i64;
  PreviousMode = KeGetCurrentThread()->PreviousMode;
  if( PreviousMode )
  {
    v7 = 0x7FFFFFFF0000i64;
    if( (unsigned __int64)JobHandle < 0x7FFFFFFF0000i64 )
      v7 = (__int64)JobHandle;
    *(_QWORD *)v7 = *(_QWORD *)v7;
  }
  LODWORD(DesiredAccessa) = v4;
  v8 = ObOpenObjectByName(
         ObjectAttributes,
         (_OBJECT_TYPE *)PsJobType,
         PreviousMode,
         0i64,
         DesiredAccessa,
         0i64,
         &Handle);
  if( v8 >= 0 )
    *JobHandle = Handle;
  return v8;
}

Referenced by: