KsepRegistryQueryDriverShims

NTSTATUS __stdcall KsepRegistryQueryDriverShims(PWCHAR DriverName, PVOID ShimsBuffer, UINT64 *ActualLength){
  int v4; 
  int v6; 
  HANDLE Handle; 
  Handle = 0i64;
  if( !DriverName || !ShimsBuffer )
    return -1073741811;
  v4 = KsepRegistryOpenKey(
         (PWCHAR)L"\\Registry\\Machine\\System\\CurrentControlSet\\Control\\Compatibility\\Driver",
         DriverName,
         &Handle);
  if( v4 >= 0 )
  {
    KsepRegistryQuerySZ((UINT64)Handle, (INT8 *)L"Shims", 7ui64, (INT8 *)ShimsBuffer);
    v4 = v6;
  }
  if( v4 == -1073741772 )
    v4 = -1073741275;
  if( Handle )
  {
    ZwClose(Handle);
    _InterlockedIncrement(&dword_140C2A7FC);
  }
  return v4;
}

Referenced by:

KsepEngineGetShimsFromRegistry