NtInitializeRegistry

NTSTATUS __stdcall NtInitializeRegistry(UINT16 BootCondition){
  char PreviousMode; 

  PreviousMode = KeGetCurrentThread()->PreviousMode;
  if( PreviousMode )
  {
    if( BootCondition == 5096 )
    {
      if( SeSinglePrivilegeCheck(*(_QWORD *)&SeBackupPrivilege, PreviousMode) )
        return CmpSyncNextBackupHive();
      else
        return -1073741727;
    }
    else
    {
      return ZwInitializeRegistry(BootCondition);
    }
  }
  else if( (unsigned __int16)(BootCondition - 4096) > 0x3E7u )
  {
    if( BootCondition == 2 )
    {
      return CmpHandlePageFileOpenNotification();
    }
    else if( BootCondition >= 2u )
    {
      return -1073741811;
    }
    else
    {
      return CmCompleteRegistryInitialization(BootCondition);
    }
  }
  else
  {
    return CmpAcceptBoot(BootCondition);
  }
}

Referenced by: