PsLookupThreadByThreadId

NTSTATUS __stdcall PsLookupThreadByThreadId(HANDLE ThreadId, PETHREAD *Thread){
  _ETHREAD *CurrentThread; 
  __int64 v4; 
  __int64 v5; 
  _EJOB *CurrentServerSilo; 
  int v8[10]; 
  CurrentThread = (_ETHREAD *)KeGetCurrentThread();
  --*((_WORD *)CurrentThread + 243);
  LODWORD(v4) = PspReferenceCidTableEntry(ThreadId, 6u);
  v5 = v4;
  if( v4 )
  {
    CurrentServerSilo = PsGetCurrentServerSilo();
    if( (*(_DWORD *)(v5 + 1296) & 2) == 0 )
    {
      _InterlockedOr(v8, 0);
      if( (*(_QWORD *)(v5 + 1280) & 1) != 0 )
        ExfAcquireReleasePushLockExclusive((VOID *)(v5 + 1280));
      if( (*(_DWORD *)(v5 + 1296) & 2) == 0 )
        goto LABEL_7;
    }
    if( !PsIsProcessInSilo(*(_QWORD *)(v5 + 544), (__int64)CurrentServerSilo) )
    {
LABEL_7:
      HalPutDmaAdapter((PADAPTER_OBJECT)v5);
      v5 = 0i64;
    }
  }
  KiLeaveGuardedRegionUnsafe((__int64)CurrentThread);
  if( !v5 )
    return -1073741813;
  *Thread = (PETHREAD)v5;
  return 0;
}

Referenced by: