ObReferenceObjectExWithTag
NTSTATUS __stdcall ObReferenceObjectExWithTag(PVOID Object, UINT64 a2){
unsigned __int64 v3;
__int64 v4;
v3 = (int)a2;
if( ObpTraceFlags )
ObpPushStackInfo((INT64)Object - 48, 1, (unsigned int)a2, 1953261124i64);
v4 = _InterlockedExchangeAdd64((volatile signed __int64 *)Object - 6, v3);
if( v4 <= 0 )
KeBugCheckEx(0x18u, 0i64, (ULONG_PTR)Object, 0x10ui64, v3 + v4);
return v3 + v4;
}Referenced by:
MiCompleteProtoPteFault
MiCreateImageOrDataSection
MiEmptyPageAccessLog
MiReferenceControlAreaFile
ObFastReferenceObject
ObFastReplaceObject
ObInitializeFastReference
ObpCreateHandle
PspInsertThread