On Mon Sep 2 08:59:54 2024 +0000, Grigory Vasilyev wrote:
@nsivov thanks for the tip, it seems they need to be implemented and they do the same thing. @Biswa96 `NtQuerySystemInformation` probably not needed, documentation says the function is designed for something else. https://learn.microsoft.com/en-us/windows/win32/api/winternl/nf-winternl-ntq... We only need `NtQuerySystemEnvironmentValueEx` and `NtQuerySystemEnvironmentValue`. The question remains open because I did not find an analogue of `GetFirmwareType` in ntdll. What is the best way to do this?
NtQuerySystemInformation is probably the correct function to call, with one of SystemFirmware constants, maybe `SystemFirmwarePartitionInformation`, or another. You will need to test them to figure which one is the right one.