KiGetDisableFgBoostDecayRegKeyHandle
NTSTATUS __stdcall KiGetDisableFgBoostDecayRegKeyHandle(){
INT64 v0;
NTSTATUS result;
_OBJECT_ATTRIBUTES v2;
result = 0;
*(&v2.Length + 1) = 0;
*(&v2.Attributes + 1) = 0;
if( !*(&KiSwapEvent + 50) )
{
v2.Length = 48;
v2.Attributes = 576;
*(_OWORD *)&v2.SecurityDescriptor = 0i64;
return ZwOpenKey(
(VOID **)&KiSwapEvent + 50,
0x11ui64,
&v2,
v0,
*(INT64 *)&v2.Length,
0i64,
(INT64)&KiDisableFgBoostDecayRegKeyName,
*(INT64 *)&v2.Attributes);
}
return result;
}Referenced by:
KiDisableFgBoostDecayRegistryChangeHandler
KiInitializeVelocity
KiRegisterForDisableFgBoostDecayRegistryNotification