You can use ZwXxx functions in the kernel mode, in particular, ZwQueryKey with KeyFullInformation parameter.
This API is quite similar to its NtXxx analogues, and you can use both API set in the kernel mode. The difference is that ZwXxx doesn't perform some access check and parameters validation, and thus runs a little faster.
For more information see this article