PpmInitIllegalThrottleLogging
VOID __stdcall PpmInitIllegalThrottleLogging(){
UINT64 Length;
UINT64 ResultLength;
VOID *Handle;
_UNICODE_STRING DestinationString;
__int128 KeyValueInformation;
int v5;
LODWORD(ResultLength) = 0;
Handle = 0i64;
DestinationString = 0i64;
if( PopOpenKey(&Handle, (WCHAR *)L"Control\\Session Manager\\Power", 0x2001Fui64) >= 0 )
{
RtlInitUnicodeString(&DestinationString, L"ProcessorThrottleLogInterval");
v5 = 0;
LODWORD(Length) = 20;
KeyValueInformation = 0i64;
if( ZwQueryValueKey(
Handle,
&DestinationString,
KeyValuePartialInformation,
&KeyValueInformation,
Length,
&ResultLength) >= 0
&& *(_QWORD *)((char *)&KeyValueInformation + 4) == 0x400000004i64 )
{
PopProcessorThrottleLogInterval = HIDWORD(KeyValueInformation);
if( HIDWORD(KeyValueInformation) > 0x2710 )
PopProcessorThrottleLogInterval = 10000;
}
ZwClose((_HANDLE)Handle);
}
}Referenced by:
PoInitSystem