KiGetDisableFgBoostDecayRegKeyHandle
NTSTATUS __stdcall KiGetDisableFgBoostDecayRegKeyHandle(){
NTSTATUS result;
struct _OBJECT_ATTRIBUTES ObjectAttributes;
result = 0;
*(&ObjectAttributes.Length + 1) = 0;
*(&ObjectAttributes.Attributes + 1) = 0;
if( !KiDisableFgBoostDecayRegistryHandle )
{
ObjectAttributes.RootDirectory = 0i64;
ObjectAttributes.Length = 48;
ObjectAttributes.ObjectName = (_UNICODE_STRING *)&KiDisableFgBoostDecayRegKeyName;
ObjectAttributes.Attributes = 576;
*(_OWORD *)&ObjectAttributes.SecurityDescriptor = 0i64;
return ZwOpenKey(&KiDisableFgBoostDecayRegistryHandle, 0x11u, &ObjectAttributes);
}
return result;
}Referenced by:
KiDisableFgBoostDecayRegistryChangeHandler
KiInitializeVelocity
KiRegisterForDisableFgBoostDecayRegistryNotification