RtlDeleteRegistryValue
NTSTATUS __stdcall RtlDeleteRegistryValue(UINT64 RelativeTo, const WCHAR *Path, const WCHAR *ValueName){
int v4;
NTSTATUS result;
_OBJECT_TYPE *v6;
NTSTATUS v7;
_UNICODE_STRING DestinationString;
VOID *KeyHandle;
KeyHandle = 0i64;
v4 = RelativeTo;
DestinationString = 0i64;
result = RtlpGetRegistryHandle(RelativeTo, Path, 1u, &KeyHandle);
if( result >= 0 )
{
RtlInitUnicodeString(&DestinationString, ValueName);
v7 = ZwDeleteValueKey(KeyHandle, &DestinationString, v6);
if( (v4 & 0x40000000) == 0 )
ZwClose((_HANDLE)KeyHandle);
return v7;
}
return result;
}Referenced by:
PerfDiagpSaveActiveDCLLogFileName