RtlQueryImageFileExecutionOptions

INT64 __stdcall RtlQueryImageFileExecutionOptions(WCHAR *OptionName, PVOID Buffer){
  VOID *v2; 
  VOID *v3; 
  int ImageFileKeyOption; 
  UINT64 BufferSize; 
  HANDLE Handle; 
  Handle = 0i64;
  v3 = v2;
  ImageFileKeyOption = RtlpOpenBaseImageFileOptionsKey(&Handle);
  if( ImageFileKeyOption >= 0 )
  {
    LODWORD(BufferSize) = 4;
    ImageFileKeyOption = RtlQueryImageFileKeyOption(Handle, (const WCHAR *)Buffer, 4ui64, v3, BufferSize, 0i64);
    if( RtlpDisableIFEOCaching )
      ZwClose(Handle);
  }
  return(unsigned int)ImageFileKeyOption;
}

Referenced by: