ObReferenceObjectByHandle

NTSTATUS __stdcall ObReferenceObjectByHandle(
        HANDLE Handle,
        ACCESS_MASK DesiredAccess,
        POBJECT_TYPE ObjectType,
        KPROCESSOR_MODE AccessMode,
        PVOID *Object,
        POBJECT_HANDLE_INFORMATION HandleInformation){
  return ObpReferenceObjectByHandleWithTag(
           (ULONG_PTR)Handle,
           DesiredAccess,
           (__int64)ObjectType,
           AccessMode,
           0x746C6644u,
           (__int64)Object,
           (__int64)HandleInformation,
           0i64);
}

Referenced by:

AlpcCreateSecurityContext
AlpcpAcceptConnectPort
AlpcpAssociateIoCompletionPort
AlpcpCaptureDirectAttribute
AlpcpCaptureDirectAttribute32
AlpcpCreateSection
AlpcpMapLegacyPortView
AlpcpPortQueryServerInfo
BuildQueryDirectoryIrp
CMFSystemThreadRoutine
CmConvertHandleToKernelHandle
CmCreateKey
CmFcpManagerCreateSection
CmLoadAppKey
CmLoadDifferencingKey
CmLoadKey
CmObReferenceObjectByHandle
CmOpenKey
CmSiProcessTupleStartFromHandle
CmUnloadKey
CmpCloneHwProfile
CmpCreateEvent
CmpCreatePredefined
CmpCreateRegistryRoot
CmpDoReOpenTransKey
CmpFileFlushAndPurge
CmpGetVolumeClusterSize
CmpInitCmRM
CmpIsThisSameFile
CmpLinkHiveToMaster
CmpMarkCurrentProfileDirty
CmpQueryNameString
CmpTransInitializeTransaction
CmpVolumeContextStart
CmpVolumeManagerGetContextForFile
DbgkCaptureLiveDump
EtwGetProviderIdFromHandle
EtwpAddNotificationEvent
EtwpCovSampCaptureContextStart
EtwpCoverageSamplerSetBloomFilter
EtwpQueryCoverageSamplerInformation
EtwpQuerySessionDemuxObject
EtwpRealtimeConnect
EtwpRealtimeDisconnectConsumerByHandle
EtwpReceiveReplyDataBlock
EtwpSendReplyDataBlock
EtwpSetCoverageSamplerInformation
EtwpSetProviderTraitsUm
EtwpTrackProviderBinary
EtwpUseDescriptorTypeUm
ExInitializeLeapSecondData
ExRegisterBootDevice
ExpCreateWorkerThread
ExpGetGlobalLocaleSection
ExpKeyedEventInitialization
ExpQueryCodeIntegrityCertificateInfo
ExpQueryElamCertInfo
ExpQuerySystemInformation
ExpSetTimer
ExpSetTimer2
ExpWatchProductTypeInitialization
FsRtlInitializeSmssEvent
IoAttachDevice
IoConvertFileHandleToKernelHandle
IoCreateDriver
IoCreateNotificationEvent
IoCreateSynchronizationEvent
IoGetDeviceObjectPointer
IoInitSystemPreDrivers
IopCheckInitiatorHint
IopConnectLinkTrackingPort
IopCreatePassiveInterruptRealtimeThreads
IopInitializeBuiltinDriver
IopInitializeCrashDump
IopLiveDumpAllocateFromVMMemoryPartition
IopLoadDriver
IopMarkBootPartition
IopOpenLinkOrRenameTarget
IopReferenceDriverObjectByName
IopReferenceFileObject
IopRetrieveTransactionParameters
IopTrackLink
IopUnloadDriver
IopXxxControlFile
IsRegistryKeyLocked
KsepSdbMapToMemory
LdrpMapResourceFile
LpcpCopyRequestData
MiCombineIdenticalPages
MiCreateImageOrDataSection
MiCreateMemoryEvent
MiCreatePagingFile
MiDeletePartitionResources
MiForceCrashForInvalidAccess
MiLoadHotPatch
MiMapImageForEnclaveUse
MiMapViewOfSectionCommon
MiQueryProcessActivePatches
MiResolveMemoryEvent
MmGetSectionStrongImageReference
MmPrefetchVirtualMemory
MmScrubMemory
MmStoreRegister
NtAcquireCrossVmMutant
NtAdjustGroupsToken
NtAdjustPrivilegesToken
NtAlpcCancelMessage
NtAlpcCreatePortSection
NtAlpcCreateResourceReserve
NtAlpcCreateSectionView
NtAlpcCreateSecurityContext
NtAlpcDeletePortSection
NtAlpcDeleteResourceReserve
NtAlpcDeleteSectionView
NtAlpcDeleteSecurityContext
NtAlpcDisconnectPort
NtAlpcImpersonateClientContainerOfPort
NtAlpcImpersonateClientOfPort
NtAlpcOpenSenderProcess
NtAlpcOpenSenderThread
NtAlpcQueryInformation
NtAlpcQueryInformationMessage
NtAlpcRevokeSecurityContext
NtAlpcSendWaitReceivePort
NtAlpcSetInformation
NtAssignProcessToJobObject
NtAssociateWaitCompletionPacket
NtCancelSynchronousIoFile
NtCancelTimer
NtCancelWaitCompletionPacket
NtClearEvent
NtCompareObjects
NtCompareTokens
NtCreateKeyTransacted
NtCreateLowBoxToken
NtCreateUserProcess
NtCreateWorkerFactory
NtDebugActiveProcess
NtDebugContinue
NtDeletePrivateNamespace
NtDuplicateToken
NtEnumerateKey
NtEnumerateValueKey
NtExtendSection
NtFilterToken
NtGetCachedSigningLevel
NtGetContextThread
NtGetDevicePowerState
NtGetNlsSectionPtr
NtImpersonateAnonymousToken
NtImpersonateThread
NtIsProcessInJob
NtLockFile
NtMakePermanentObject
NtMakeTemporaryObject
NtNotifyChangeDirectoryFileEx
NtNotifyChangeMultipleKeys
NtNotifyChangeSession
NtOpenKeyTransactedEx
NtOpenObjectAuditAlarm
NtOpenThreadTokenEx
NtPrivilegeCheck
NtPrivilegeObjectAuditAlarm
NtPrivilegedServiceAuditAlarm
NtPulseEvent
NtQueryDirectoryObject
NtQueryEvent
NtQueryInformationPort
NtQueryInformationProcess
NtQueryInformationThread
NtQueryInformationWorkerFactory
NtQueryIoCompletion
NtQueryKey
NtQueryMutant
NtQueryObject
NtQuerySection
NtQuerySecurityObject
NtQuerySemaphore
NtQuerySymbolicLinkObject
NtQueryTimer
NtQueryValueKey
NtQueueApcThreadEx
NtReadFile
NtReadFileScatter
NtRegisterThreadTerminatePort
NtReleaseKeyedEvent
NtReleaseMutant
NtReleaseSemaphore
NtReleaseWorkerFactoryWorker
NtRemoveIoCompletion
NtRemoveIoCompletionEx
NtRemoveProcessDebug
NtReplyPort
NtReplyWaitReceivePortEx
NtReplyWaitReplyPort
NtRequestPort
NtRequestWaitReplyPort
NtResetEvent
NtRollbackRegistryTransaction
NtSetContextThread
NtSetDefaultHardErrorPort
NtSetEvent
NtSetEventBoostPriority
NtSetInformationDebugObject
NtSetInformationFile
NtSetInformationKey
NtSetInformationObject
NtSetInformationProcess
NtSetInformationSymbolicLink
NtSetInformationToken
NtSetInformationVirtualMemory
NtSetInformationWorkerFactory
NtSetIoCompletion
NtSetIoCompletionEx
NtSetSecurityObject
NtSetSystemInformation
NtSetTimerEx
NtSetWnfProcessNotificationEvent
NtShutdownWorkerFactory
NtStartProfile
NtStopProfile
NtTerminateJobObject
NtTraceEvent
NtUnlockFile
NtWaitForDebugEvent
NtWaitForKeyedEvent
NtWaitForWorkViaWorkerFactory
NtWorkerFactoryWorkerReady
NtWriteFile
NtWriteFileGather
ObCreateSiloRootDirectory
ObInitSystem
ObpCreateDirectoryObject
ObpCreateHandle
ObpInitializeRootNamespace
ObpSetDeviceMap
PfSnGetSectionObject
PfTStart
PfpCreateEvent
PfpPrefetchRequest
Phase1InitializationDiscard
PiCMDuplicateRegistryHandle
PiDrvDbQuerySystemPathWin32
PiUEventGetDeviceInstanceIdFromUserHandle
PopBootStatAccessCheck
PsAssignImpersonationToken
PsSetCpuQuotaInformation
PspAssignPrimaryToken
PspAttachThreadToUmsCompletionList
PspCreatePartitionSystemProcess
PspCreateProcess
PspInitPhase0
PspInitPhase1
PspLocateSystemDll
PspMapView
PspReferenceTokenForNewProcess
PspUmsInitThread
RtlCheckTokenCapability
RtlCheckTokenMembershipEx
RtlIsSandboxedTokenHandle
SLUpdateLicenseDataInternal
SMKM_STORE::SmStWorkerThreadStartThread
SPCallServerHandleFileIntegrityQuery
SPCallServerHandleFileIntegrityUpdate
SPCallServerHandleFileUsnQuery
SeAuditHandleCreation
SeGetLogonSessionToken
SeSetLearningModeObjectInformation
SeSetSecurityAttributesTokenEx
SepAccessCheckAndAuditAlarmWithAdminlessChecks
SepInternalSetSecurityAttributesToken
SepLinkLogonSessions
SepReferenceTokenByHandle
SepRmLsaConnectRequest
SepRmVerifyLsaProtectionLevel
SepValidateReferencedCachedHandles
SmCreateEvent
SmFirstTimeInit
SmKmFileInfoDuplicate
SmKmStoreFileCreateForIoType
SmKmStoreFileOpenVolume
SmKmStoreHelperStart
SmRereferenceProcessObject
SmpUtilsGetControlDevice
TtmiOpenDefaultTerminal
TtmpAcquireSessionFromTerminalHandle
TtmpDispatchGetTerminalEvent
VfCheckUserHandle
VfPendingInitPhase1
VfPoolInitPhase1
VhdiMountVhdFile
VmCreateMemoryProcess
VmTerminateMemoryProcess
VrpPreLoadKey
VrpTranslatePath
WmipGetFilePDO
WmipQueryAllData
WmipQueryGuidInfo
WmipQuerySetExecuteSI
WmipReceiveNotifications
WmipTranslateFileHandle