CcOpenRegistryPath

NTSTATUS __fastcall CcOpenRegistryPath(__int64 a1, HANDLE *a2){
  struct _OBJECT_ATTRIBUTES v3; 
  v3.ObjectName = (_UNICODE_STRING *)a1;
  *(_QWORD *)&v3.Length = 48i64;
  v3.RootDirectory = 0i64;
  *(_QWORD *)&v3.Attributes = 576i64;
  *(_OWORD *)&v3.SecurityDescriptor = 0i64;
  return ZwOpenKey(a2, 0x10u, &v3);
}

Referenced by:

CcRegistryChangeCallback
CcSetupWatchForRegistryChanges