ObCloseHandle

NTSTATUS __stdcall ObCloseHandle(VOID *Handle, INT8 PreviousMode){
  UINT64 v4; 
  VOID *v6; 

  if( (MmVerifierData & 0x100) != 0 && !PreviousMode && !ObpIsKernelHandle(Handle, 0) )
    VfCheckUserHandle(v6);
  LOBYTE(v4) = PreviousMode;
  return ObpCloseHandle(Handle, v4);
}

Referenced by:

CmFcManagerQueryFeatureConfigurationSectionInformation
CmQueryFeatureConfigurationSections
CmpCreateRegistryRoot
DbgkCreateThread
DbgkMapViewOfSection
DbgkPostModuleMessage
DbgkSendSystemDllMessages
DbgkUserReportWorkRoutine
DbgkpDeleteErrorPort
DbgkpFreeDebugEvent
DbgkpOpenHandles
DbgkpPostFakeThreadMessages
EtwpCovSampCaptureContextStart
ExGetNextProcess
ExShutdownSystem
ExpDeleteWorkerFactory
ExpGetProcessInformation
ExpWatchProductTypeWork
ExpWorkerFactoryCreateThread
IoConvertFileHandleToKernelHandle
IoCreateController
IoCreateDevice
IoCreateStreamFileObjectEx2
IoInitSystemPreDrivers
IoSetInformation
IopCreateFile
IopCreateRootDirectories
IopCreateUmdfDirectory
IopFastQueryNetworkAttributes
IopInitializeOfflineCrashDump
IopIsBitlockerOn
IopLiveDumpReleaseResources
IopLoadDriver
IopMarkBootPartition
IopOpenLinkOrRenameTarget
IopReadDumpRegistry
IopReassignSystemRoot
IopSafebootDriverLoad
IopStoreSystemPartitionInformation
IopUnloadDriver
MiCreateMemoryEvent
MiCreatePagingFile
MiCreateSectionForDriver
MiDeletePagefile
MiDeletePartitionResources
MiDereferenceSessionFinal
MiForceCrashForInvalidAccess
MiInitSystem
MiLoadHotPatch
MiLoadHotPatchForUserSid
MiOpenHotPatchFile
MiSectionInitialization
MiZeroBootLargePages
MiZeroInParallel
MiZeroNodePages
MmManagePartitionGetMemoryEvents
MmStoreRegister
MmZeroPageFileAtShutdown
NtCreateLowBoxToken
NtCreateUserProcess
NtCreateWorkerFactory
NtQueryAttributesFile
NtQueryFullAttributesFile
NtSetInformationFile
PfTStart
PiCMOpenClassKey
PiCMOpenDeviceInterfaceKey
PiCMOpenDeviceKey
PiCMOpenObjectKey
PsBootPhaseComplete
PspAllocateProcess
PspCombineSecurityDomains
PspCreatePartitionSystemProcess
PspDeleteCreateProcessContext
PspExitThread
PspInitPhase0
PspInsertThread
PspLocateSystemDll
PspOneDirectionSecurityDomainCombine
PspTeardownPartition
PspUpdateCreateInfo
SMKM_STORE::SmStWorkerThreadStartThread
SMKM_STORE_MGR::SmCompressCtxCreateThread
SecureDump_ReadRegistry
SmKmStoreHelperStart
SmRegistrationInfoFill
VrpPreLoadKey