CmpFindMachineHiveByMountPoint
INT64 __stdcall CmpFindMachineHiveByMountPoint(PCUNICODE_STRING String2){
unsigned int *v1;
unsigned int v2;
unsigned int *v3;
unsigned int v4;
UNICODE_STRING String1;
char v8;
v2 = 0;
v3 = v1;
v4 = 0;
while( 1 )
{
*(_QWORD *)&String1.Length = 0x800000i64;
String1.Buffer = (wchar_t *)&v8;
CmpBuildMachineHiveMountPoint(v4, &String1);
if( RtlEqualUnicodeString(&String1, (UNICODE_STRING *)String2, 1u) )
break;
if( ++v4 >= 7 )
return(unsigned int)-1073741766;
}
*v3 = v4;
return v2;
}Referenced by:
CmRegisterMachineHiveLoadedNotification