NTSTATUS __stdcall NtThawRegistry(){
NTSTATUS v0;
_KAPC_STATE ApcState;
memset(&ApcState, 0, sizeof(ApcState));
if( !SeSinglePrivilegeCheck(*(_QWORD *)&SeBackupPrivilege, KeGetCurrentThread()->PreviousMode) )
return -1073741727;
CmpAttachToRegistryProcess(&ApcState);
v0 = CmThawRegistry();
KiUnstackDetachProcess(&ApcState, 0i64);
return v0;
}