VOID __fastcall NtThawRegistry(){
KAPC_STATE ApcState;
memset(&ApcState, 0, sizeof(ApcState));
if( SeSinglePrivilegeCheck(*(_QWORD *)&SeBackupPrivilege, *((_BYTE *)KeGetCurrentThread() + 562)) )
{
CmpAttachToRegistryProcess(&ApcState);
CmThawRegistry();
KiUnstackDetachProcess(&ApcState, 0i64);
}
}