SeRmInitPhase1
UINT8 __stdcall SeRmInitPhase1(){
_OBJECT_ATTRIBUTES ObjectAttributes;
*(&ObjectAttributes.Length + 1) = 0;
ObjectAttributes.RootDirectory = 0i64;
memset(&ObjectAttributes.Attributes, 0, 24);
ObjectAttributes.Length = 48;
ObjectAttributes.ObjectName = (_UNICODE_STRING *)L" \"";
if( ZwCreatePort((VOID **)&PortHandle, &ObjectAttributes, 4ui64, 0x200ui64) < 0 )
return 0;
SepAdtInitializeAuditingOptions();
if( PsCreateSystemThread((PHANDLE)&ThreadHandle, 0x38u, 0i64, 0, 0i64, SepRmCommandServerThread, 0i64) < 0 )
return 0;
AuthzBasepInitializeSystemSecurityAttributes();
ZwClose(ThreadHandle);
ThreadHandle = 0i64;
TraceLoggingRegisterEx_EtwRegister_EtwSetInformation((char *)&stru_140C00F40 + 7152);
return 1;
}Referenced by:
Phase1InitializationIoReady