IopCheckIfNotNativeDriver

BOOL __stdcall IopCheckIfNotNativeDriver(NTSTATUS itialDriverLoadStatus, PUNICODE_STRING ImageFileName){
  wchar_t *Buffer; 
  _WORD *v4; 

  Buffer = ImageFileName->Buffer;
  if( itialDriverLoadStatus != -1073741772 )
    return IopIsNotNativeDriverImage(ImageFileName);
  if( !Buffer )
    return 0;
  while( wcsnicmp(Buffer, L"\\System32\\drivers\\", 0x12u) )
  {
    Buffer = wcsstr(Buffer + 1, (INT8 *)L"\\");
    if( !Buffer )
      return 0;
  }
  RtlStringCbCopyNW(
    Buffer + 1,
    ImageFileName->MaximumLength - (unsigned __int64)(unsigned __int16)((_WORD)Buffer - LOWORD(ImageFileName->Buffer)),
    (WCHAR *)L"SysWow64",
    0x10ui64);
  v4 = Buffer + 9;
  *v4 = 92;
  if( v4 )
    return IopIsNotNativeDriverImage(ImageFileName);
  else
    return 0;
}

Referenced by: