PipIs32bitKey
UINT64 __stdcall PipIs32bitKey(PVOID KeyHandle){
unsigned int v2;
UINT64 ResultLength;
__int64 v5;
int v6;
char KeyValueInformation[4];
int v8;
int v9;
int v10;
LODWORD(ResultLength) = 0;
v5 = 0i64;
v6 = 0;
if( ZwQueryKey(KeyHandle, KeyFlagsInformation, &v5, 0xCui64, &ResultLength) >= 0 && (v5 & 1) != 0 )
{
return 1;
}
else
{
v2 = 0;
if( ZwQueryValueKey(
KeyHandle,
(PUNICODE_STRING)&stru_140009520,
KeyValuePartialInformation,
KeyValueInformation,
0x14u,
(PULONG)&ResultLength) >= 0
&& v8 == 4
&& v9 == 4
&& v10 == 1 )
{
return 1;
}
}
return v2;
}Referenced by:
PnpLoadBootFilterDriver