KsepRegistryQueryDriverShims
NTSTATUS __stdcall KsepRegistryQueryDriverShims(PWCHAR DriverName, PVOID ShimsBuffer, UINT64 *ActualLength){
int v4;
int v6;
HANDLE Handle;
Handle = 0i64;
if( !DriverName || !ShimsBuffer )
return -1073741811;
v4 = KsepRegistryOpenKey(
(PWCHAR)L"\\Registry\\Machine\\System\\CurrentControlSet\\Control\\Compatibility\\Driver",
DriverName,
&Handle);
if( v4 >= 0 )
{
KsepRegistryQuerySZ((UINT64)Handle, (INT8 *)L"Shims", 7ui64, (INT8 *)ShimsBuffer);
v4 = v6;
}
if( v4 == -1073741772 )
v4 = -1073741275;
if( Handle )
{
ZwClose(Handle);
_InterlockedIncrement(&dword_140C2A7FC);
}
return v4;
}Referenced by:
KsepEngineGetShimsFromRegistry