IsMachineLanguageListInMutableLocation
BOOL __stdcall IsMachineLanguageListInMutableLocation(){
bool v0;
UINT64 v1;
UINT64 *KeyValueLength;
INT64 v4;
_UNICODE_STRING DestinationString;
_UNICODE_STRING KeyValueName;
int KeyValue;
UINT64 v8;
UINT64 KeyValueType;
VOID *ChildHandle;
v0 = 0;
DestinationString = 0i64;
RtlInitUnicodeString(
&DestinationString,
L"\\Registry\\Machine\\OSDATA\\System\\CurrentControlSet\\Control\\MUI\\UILanguages");
ChildHandle = 0i64;
if( LdrpOpenKey(
&DestinationString,
0i64,
v1,
&ChildHandle,
(INT64)KeyValueLength,
v4,
*(INT64 *)&DestinationString.Length,
(INT64)DestinationString.Buffer) >= 0 )
{
KeyValueName = 0i64;
RtlInitUnicodeString(&KeyValueName, L"MachineLanguageListMigrationState");
KeyValue = 0;
LODWORD(KeyValueType) = 4;
LODWORD(v8) = 4;
if( LdrpQueryValueKey(ChildHandle, &KeyValueName, &KeyValueType, &KeyValue, &v8) >= 0 )
v0 = KeyValue == 1;
}
if( ChildHandle )
NtClose((UINT64)ChildHandle);
return v0;
}Referenced by:
RtlpMuiRegLoadInstalled