CmObReferenceObjectByName

__int64 __fastcall CmObReferenceObjectByName(
        _OBJECT_ATTRIBUTES *a1,
        _ACCESS_STATE *a2,
        UINT64 a3,
        __int64 a4,
        INT64 a5,
        __int64 a6,
        __int64 a7){
  NTSTATUS v7; 
  VOID *ProbeMode; 

  LOBYTE(ProbeMode) = a5;
  v7 = ObReferenceObjectByNameEx(a1, (UINT64)a2, (_OBJECT_TYPE *)a3, (CHAR)CmKeyObjectType, ProbeMode, (VOID **)a6);
  if( v7 >= 0 )
  {
    if( MEMORY[0] == 1803104306 )
    {
      *(_QWORD *)a7 = 0i64;
      return 0;
    }
    else
    {
      return(unsigned int)-1073741816;
    }
  }
  return(unsigned int)v7;
}

Referenced by: