KiGetDisableFgBoostDecayRegKeyHandle

NTSTATUS __stdcall KiGetDisableFgBoostDecayRegKeyHandle(){
  NTSTATUS result; 
  struct _OBJECT_ATTRIBUTES ObjectAttributes; 
  result = 0;
  *(&ObjectAttributes.Length + 1) = 0;
  *(&ObjectAttributes.Attributes + 1) = 0;
  if( !KiDisableFgBoostDecayRegistryHandle )
  {
    ObjectAttributes.RootDirectory = 0i64;
    ObjectAttributes.Length = 48;
    ObjectAttributes.ObjectName = (_UNICODE_STRING *)&KiDisableFgBoostDecayRegKeyName;
    ObjectAttributes.Attributes = 576;
    *(_OWORD *)&ObjectAttributes.SecurityDescriptor = 0i64;
    return ZwOpenKey(&KiDisableFgBoostDecayRegistryHandle, 0x11u, &ObjectAttributes);
  }
  return result;
}

Referenced by:

KiDisableFgBoostDecayRegistryChangeHandler
KiInitializeVelocity
KiRegisterForDisableFgBoostDecayRegistryNotification