SdbpCheckMatchingRegistry

NTSTATUS __stdcall SdbpCheckMatchingRegistry(
        INT64 *bMatched,
        VOID *hSDB,
        _DB *pdb,
        UINT64 tiParent,
        UINT64 tiMatchingReg,
        VOID *Context,
        VOID *MatcherContext){
  NTSTATUS v7; 
  int v9; 
  INT8 *v10; 
  UINT64 v11; 
  UINT64 *dwValueDataDb; 
  UINT64 ulValueTypeDb; 
  UINT64 pValueDataSize; 
  UINT8 *pValueDataDb; 
  UINT64 qwValueDataDb; 
  PWCHAR pwszValueDataDb; 
  PWCHAR pwszValueNameDb; 
  PWCHAR pwszKeyPath; 

  v7 = 0;
  *(_DWORD *)bMatched = 0;
  pwszKeyPath = 0i64;
  dwValueDataDb = &ulValueTypeDb;
  pwszValueNameDb = 0i64;
  ulValueTypeDb = 0i64;
  pwszValueDataDb = 0i64;
  qwValueDataDb = 0i64;
  pValueDataDb = 0i64;
  pValueDataSize = 0i64;
  SdbpGetRegistryMatchingAttributes();
  if( v9 )
  {
    LODWORD(dwValueDataDb) = 0;
    if( SdbpCheckMatchingRegistryEntry(
           pwszKeyPath,
           pwszValueNameDb,
           (unsigned int)ulValueTypeDb,
           pwszValueDataDb,
           (UINT64)dwValueDataDb,
           qwValueDataDb,
           pValueDataDb,
           pValueDataSize,
           (INT64 *)((char *)&ulValueTypeDb + 4)) )
    {
      v7 = 1;
      *((_DWORD *)Context + 20) = 1;
      *(_DWORD *)bMatched = HIDWORD(ulValueTypeDb);
      return v7;
    }
    v10 = "Failed to check MATCHING_REG entry";
    v11 = 1500i64;
  }
  else
  {
    v10 = (INT8 *)"Failed to read MATCHING_REG entry";
    v11 = 1483i64;
  }
  AslLogCallPrintf(1ui64, (INT8 *)"SdbpCheckMatchingRegistry", v11, v10);
  return v7;
}

Referenced by: