RtlQueryRegistryValuesEx
NTSTATUS __stdcall RtlQueryRegistryValuesEx(
UINT64 RelativeTo,
const WCHAR *Path,
_RTL_QUERY_REGISTRY_TABLE *QueryTable,
VOID *Context,
VOID *Environment){
NTSTATUS result;
LOBYTE(result) = RtlpQueryRegistryValues((_KTRAP_FRAME *)RelativeTo, (_KEXCEPTION_FRAME *)Path);
return result;
}Referenced by:
CmIsLastKnownGoodBoot
EtwpQueryPartitionRegistryInformation
EtwpReadConfigParameters
EtwpReadPerSiloConfigParameters
ExpReadTimeZoneInformation
IopInitCrashDumpDuringSysInit
RtlCheckPortableOperatingSystem
RtlpFindRegTziForCurrentYear
SmQueryRegistry
sub_1405B03A8