KiRegisterForDisableFgBoostDecayRegistryNotification

NTSTATUS __stdcall KiRegisterForDisableFgBoostDecayRegistryNotification(){
  NTSTATUS result; 

  result = KiGetDisableFgBoostDecayRegKeyHandle();
  if( result >= 0 )
  {
    *(&KiSwapEvent + 55) = 0i64;
    *(&KiSwapEvent + 52) = 0i64;
    *(&KiSwapEvent + 54) = KiDisableFgBoostDecayRegistryChangeHandler;
    result = ZwNotifyChangeKey(
               *(&KiSwapEvent + 100),
               0,
               (PIO_APC_ROUTINE)((char *)&KiSwapEvent + 416),
               (PVOID)1,
               (PIO_STATUS_BLOCK)&KiSwapEvent + 28,
               4u,
               0,
               0i64,
               0,
               1u);
    if( result < 0 )
    {
      result = ZwClose(*(&KiSwapEvent + 100));
      *(&KiSwapEvent + 50) = 0i64;
    }
  }
  return result;
}

Referenced by: