LdrpOpenKey

INT64 __fastcall LdrpOpenKey(_UNICODE_STRING *KeyName, VOID *ParentHandle, UINT64 AccessMask, VOID **ChildHandle){
  INT64 result; 
  struct _OBJECT_ATTRIBUTES v5; 
  v5.RootDirectory = ParentHandle;
  v5.ObjectName = KeyName;
  *(_QWORD *)&v5.Length = 48i64;
  *(_QWORD *)&v5.Attributes = 576i64;
  *ChildHandle = 0i64;
  *(_OWORD *)&v5.SecurityDescriptor = 0i64;
  LODWORD(result) = ZwOpenKey(ChildHandle, 0x20019u, &v5);
  return result;
}

Referenced by: