SmRegistrationInfoFill

NTSTATUS __stdcall SmRegistrationInfoFill(
        VOID **RegistrationCtx,
        _KPROCESSOR_MODE RequestorMode,
        _SM_REGISTRATION_INFO *RegInfo){
  VOID *v3; 
  INT8 v5; 
  int v6; 
  VOID *v7; 
  _KPROCESSOR_MODE AccessMode; 
  VOID *v10; 

  v3 = *RegistrationCtx;
  v10 = 0i64;
  v5 = RequestorMode;
  LOBYTE(AccessMode) = RequestorMode;
  v6 = ObOpenObjectByPointer(v3, 0i64, 0i64, 2031619, (POBJECT_TYPE)ExEventObjectType, AccessMode, &v10);
  if( v6 < 0 )
  {
    v7 = v10;
  }
  else
  {
    v7 = 0i64;
    *(_QWORD *)RegInfo = v10;
    v6 = 0;
    v10 = 0i64;
  }
  if( v7 )
    ObCloseHandle(v7, v5);
  return v6;
}

Referenced by: