There is also another check later in IopQueryRegistryKeySystemPath that ensures the ImagePath is under the "System" key

0 likes 0 replies