RtlFindMessage
NTSTATUS __fastcall RtlFindMessage(VOID *DllHandle, UINT64 a2, UINT64 a3, UINT64 er9_0, UINT16 **a4){
unsigned int v6;
NTSTATUS result;
UINT64 Size;
PVOID ResourceDirectoryOrData;
VOID *Address;
UINT64 ResourceIdPath[4];
ResourceDirectoryOrData = 0i64;
Address = 0i64;
LODWORD(Size) = 0;
v6 = er9_0;
ResourceIdPath[0] = (unsigned int)a2;
ResourceIdPath[2] = (unsigned int)a3;
ResourceIdPath[1] = 1i64;
ResourceIdPath[3] = (unsigned int)er9_0;
result = LdrpSearchResourceSection_U(DllHandle, ResourceIdPath, 4ui64, 0x40ui64, &ResourceDirectoryOrData);
if( result >= 0 )
{
result = LdrpAccessResourceData(
DllHandle,
(const _IMAGE_RESOURCE_DATA_ENTRY *)ResourceDirectoryOrData,
&Address,
&Size);
if( result >= 0 )
return RtlpFindMessageInTable((INT64 *)Address, (unsigned int)Size, v6, a4);
}
return result;
}Referenced by:
ExpSystemErrorHandler2
InitBootProcessor
IopInitializeBootLogging
PiGetDefaultMessageString
ResFwFindMessage