NtRestoreKey - NtDoc

Native API online documentation, based on the System Informer (formerly Process Hacker) phnt headers

#ifndef _NTREGAPI_H

NTSYSCALLAPI
NTSTATUS
NTAPI
NtRestoreKey(
    _In_ HANDLE KeyHandle,
    _In_ HANDLE FileHandle,
    _In_ ULONG Flags
    );

#endif
View code on GitHub

#ifndef _NTZWAPI_H

NTSYSCALLAPI
NTSTATUS
NTAPI
ZwRestoreKey(
    _In_ HANDLE KeyHandle,
    _In_ HANDLE FileHandle,
    _In_ ULONG Flags
    );

#endif
View code on GitHub

KeyHandle

All keys and values stored in file represented by FileHandle will be children of KeyHandle.

FileHandle

See NtSaveKey for more information about FileHandle.

RestoreOption

See RegRestoreKey in SDK

Requirements

Privilege: SE_RESTORE_NAME

KeyHandle

FileHandle

RestoreOption

Requirements

See also