HalpMcaExtendedLogGetL1DirectoryBase

NTSTATUS __fastcall HalpMcaExtendedLogGetL1DirectoryBase(_QWORD *a1, INT64 a2, WCHAR a3){
  NTSTATUS result; 
  WCHAR v5; 
  int v6; 
  ULONG ResultLength; 
  void *KeyHandle; 
  struct _UNICODE_STRING DestinationString; 
  struct _UNICODE_STRING ValueName; 
  struct _OBJECT_ATTRIBUTES ObjectAttributes; 
  char KeyValueInformation[12]; 
  __int64 v13; 
  *a1 = 0i64;
  *(&ObjectAttributes.Length + 1) = 0;
  *(&ObjectAttributes.Attributes + 1) = 0;
  ResultLength = 0;
  KeyHandle = 0i64;
  DestinationString = 0i64;
  ValueName = 0i64;
  RtlInitUnicodeString(
    &DestinationString,
    L"\\Registry\\Machine\\System\\CurrentControlSet\\Services\\ACPI\\Parameters",
    a3);
  ObjectAttributes.RootDirectory = 0i64;
  ObjectAttributes.ObjectName = &DestinationString;
  ObjectAttributes.Length = 48;
  ObjectAttributes.Attributes = 576;
  *(_OWORD *)&ObjectAttributes.SecurityDescriptor = 0i64;
  result = ZwOpenKey(&KeyHandle, 0x20019u, &ObjectAttributes);
  if( result >= 0 )
  {
    RtlInitUnicodeString(&ValueName, L"EMcaL1DirectoryBase", v5);
    v6 = ZwQueryValueKey(KeyHandle, &ValueName, KeyValuePartialInformation, KeyValueInformation, 0x17u, &ResultLength);
    if( v6 >= 0 )
      *a1 = v13;
    ZwClose(KeyHandle);
    return v6;
  }
  return result;
}

Referenced by:

HalpMcaExtendedLogInitialize