CmIsLastKnownGoodBoot

bool CmIsLastKnownGoodBoot(){
  int v1; 
  int v2; 
  int v3; 
  _RTL_QUERY_REGISTRY_TABLE QueryTable; 
  __int64 v5; 
  int v6; 
  const wchar_t *v7; 
  int *v8; 
  int v9; 
  int *v10; 
  int v11; 
  __int64 v12; 
  int v13; 
  const wchar_t *v14; 
  int *v15; 
  int v16; 
  int *v17; 
  int v18; 
  __int64 v19; 
  int v20; 
  __int64 v21; 
  __int64 v22; 
  int v23; 
  __int64 v24; 
  int v25; 

  QueryTable.Name = (wchar_t *)L"Current";
  v3 = 0;
  QueryTable.DefaultType = 67108868;
  QueryTable.Flags = 288;
  QueryTable.EntryContext = &v1;
  v6 = 288;
  QueryTable.DefaultData = &v1;
  v7 = L"LastKnownGood";
  v8 = &v2;
  v10 = &v2;
  v14 = L"Default";
  v15 = &v3;
  v9 = 67108868;
  v13 = 288;
  v16 = 67108868;
  v17 = &v3;
  v1 = 0;
  v2 = 0;
  QueryTable.QueryRoutine = 0i64;
  QueryTable.DefaultLength = 0;
  v5 = 0i64;
  v11 = 0;
  v12 = 0i64;
  v18 = 0;
  v19 = 0i64;
  v20 = 0;
  v21 = 0i64;
  v22 = 0i64;
  v23 = 0;
  v24 = 0i64;
  v25 = 0;
  return RtlQueryRegistryValuesEx(0i64, L"\\Registry\\Machine\\System\\Select", &QueryTable, 0i64, 0i64) >= 0
      && v1 != v3
      && v2 == v1;
}

Referenced by: