KiRegisterForDisableFgBoostDecayRegistryNotification

NTSTATUS __stdcall KiRegisterForDisableFgBoostDecayRegistryNotification(){
  NTSTATUS result; 
  BOOL WatchTree; 
  BOOL Asynchronous; 
  result = KiGetDisableFgBoostDecayRegKeyHandle();
  if( result >= 0 )
  {
    qword_140C31EF8 = 0i64;
    *(_QWORD *)KiDisableFgBoostDecayRegistryChangeWork = 0i64;
    LOBYTE(Asynchronous) = 1;
    qword_140C31EF0 = (__int64)KiDisableFgBoostDecayRegistryChangeHandler;
    LOBYTE(WatchTree) = 0;
    result = ZwNotifyChangeKey(
               KiDisableFgBoostDecayRegistryHandle,
               0i64,
               KiDisableFgBoostDecayRegistryChangeWork,
               (PVOID)1,
               &KiDisableFgBoostDecayRegistryChangeIoStatus,
               4u,
               WatchTree,
               0i64,
               0,
               Asynchronous);
    if( result < 0 )
    {
      result = ZwClose(KiDisableFgBoostDecayRegistryHandle);
      KiDisableFgBoostDecayRegistryHandle = 0i64;
    }
  }
  return result;
}

Referenced by: