HalpMcaExtendedLogGetL1DirectoryBase
NTSTATUS __fastcall HalpMcaExtendedLogGetL1DirectoryBase(_QWORD *a1, INT64 a2, WCHAR a3){
NTSTATUS result;
WCHAR v5;
int v6;
ULONG ResultLength;
void *KeyHandle;
struct _UNICODE_STRING DestinationString;
struct _UNICODE_STRING ValueName;
struct _OBJECT_ATTRIBUTES ObjectAttributes;
char KeyValueInformation[12];
__int64 v13;
*a1 = 0i64;
*(&ObjectAttributes.Length + 1) = 0;
*(&ObjectAttributes.Attributes + 1) = 0;
ResultLength = 0;
KeyHandle = 0i64;
DestinationString = 0i64;
ValueName = 0i64;
RtlInitUnicodeString(
&DestinationString,
L"\\Registry\\Machine\\System\\CurrentControlSet\\Services\\ACPI\\Parameters",
a3);
ObjectAttributes.RootDirectory = 0i64;
ObjectAttributes.ObjectName = &DestinationString;
ObjectAttributes.Length = 48;
ObjectAttributes.Attributes = 576;
*(_OWORD *)&ObjectAttributes.SecurityDescriptor = 0i64;
result = ZwOpenKey(&KeyHandle, 0x20019u, &ObjectAttributes);
if( result >= 0 )
{
RtlInitUnicodeString(&ValueName, L"EMcaL1DirectoryBase", v5);
v6 = ZwQueryValueKey(KeyHandle, &ValueName, KeyValuePartialInformation, KeyValueInformation, 0x17u, &ResultLength);
if( v6 >= 0 )
*a1 = v13;
ZwClose(KeyHandle);
return v6;
}
return result;
}Referenced by:
HalpMcaExtendedLogInitialize