IopLiveDumpValidateCancelObject

NTSTATUS __stdcall IopLiveDumpValidateCancelObject(VOID *CancelObject){
  NTSTATUS v1; 
  POBJECT_TYPE *v3; 

  v1 = 0;
  if( !CancelObject )
    return 0;
  v3 = (POBJECT_TYPE *)ObTypeIndexTable[(unsigned __int8)ObHeaderCookie ^ (unsigned __int8)*((char *)CancelObject - 24) ^ (unsigned __int64)(unsigned __int8)((unsigned __int16)((_WORD)CancelObject - 48) >> 8)];
  if( v3 != ExEventObjectType && v3 != PsProcessType && v3 != PsThreadType && v3 != (POBJECT_TYPE *)ExTimerObjectType )
    return -1073741811;
  return v1;
}

Referenced by: