RtlQueryImageFileExecutionOptions

NTSTATUS __stdcall RtlQueryImageFileExecutionOptions(WCHAR *OptionName, VOID *Buffer){
  VOID *v2; 
  VOID *v3; 
  int ImageFileKeyOption; 
  UINT64 v7; 
  VOID *KeyHandle; 

  KeyHandle = 0i64;
  v3 = v2;
  ImageFileKeyOption = RtlpOpenBaseImageFileOptionsKey(&KeyHandle);
  if( ImageFileKeyOption >= 0 )
  {
    LODWORD(v7) = 4;
    ImageFileKeyOption = RtlQueryImageFileKeyOption(KeyHandle, (WCHAR *)Buffer, 4ui64, v3, v7, 0i64);
    if( *(&stru_140CF2E80 + 1818) )
      ZwClose((_HANDLE)KeyHandle);
  }
  return ImageFileKeyOption;
}

Referenced by: