LdrpOpenKey
NTSTATUS __stdcall LdrpOpenKey(
_UNICODE_STRING *KeyName,
VOID *ParentHandle,
UINT64 AccessMask,
VOID **ChildHandle,
INT64 a5,
INT64 a6,
INT64 a7,
INT64 a8){
_OBJECT_ATTRIBUTES v9;
v9.RootDirectory = ParentHandle;
v9.ObjectName = KeyName;
*(_QWORD *)&v9.Length = 48i64;
*(_QWORD *)&v9.Attributes = 576i64;
*ChildHandle = 0i64;
*(_OWORD *)&v9.SecurityDescriptor = 0i64;
return ZwOpenKey(
ChildHandle,
0x20019ui64,
&v9,
(INT64)ChildHandle,
*(INT64 *)&v9.Length,
(INT64)v9.RootDirectory,
(INT64)v9.ObjectName,
*(INT64 *)&v9.Attributes);
}Referenced by:
IsMachineLanguageListInMutableLocation
RtlpLoadInstallLanguageFallback
RtlpLoadLanguageConfigList
RtlpMuiRegLoadInstalledFromKey
RtlpRemovePendingDeleteLanguages