SepRegQueryDwordValue

NTSTATUS __stdcall SepRegQueryDwordValue(UINT64 *Value){
  wchar_t *v1; 
  void *v2; 
  void *ValueBuffer; 
  wchar_t *v4; 
  int v5; 
  PVOID hKey; 

  hKey = 0i64;
  ValueBuffer = v2;
  v4 = v1;
  v5 = SepRegOpenKey((WCHAR *)L"\\Registry\\Machine\\System\\CurrentControlSet\\Control\\Lsa", 0x201ui64, &hKey);
  if( v5 >= 0 )
  {
    v5 = SepRegQueryValue(hKey, v4, 4ui64, 4ui64, ValueBuffer);
    ZwClose((_HANDLE)hKey);
  }
  return v5;
}

Referenced by:

NtImpersonateAnonymousToken