NtFreezeRegistry

NTSTATUS __stdcall NtFreezeRegistry(UINT64 TimeOutInSeconds){
  int v1; 
  NTSTATUS v2; 
  _KAPC_STATE ApcState; 

  v1 = TimeOutInSeconds;
  memset(&ApcState, 0, sizeof(ApcState));
  if( (unsigned int)TimeOutInSeconds > 0x384 )
    return -1073741811;
  if( !SeSinglePrivilegeCheck(*(_QWORD *)&SeBackupPrivilege, KeGetCurrentThread()->PreviousMode) )
    return -1073741727;
  CmpAttachToRegistryProcess(&ApcState);
  v2 = CmFreezeRegistry(v1);
  CmpDetachFromRegistryProcess(&ApcState);
  return v2;
}

Referenced by: