EtwpInitializePrivateSessionDemuxObject
INT64 __stdcall EtwpInitializePrivateSessionDemuxObject(){
WCHAR v0;
struct _UNICODE_STRING DestinationString;
__int16 result;
char result_2;
int v5;
GENERIC_MAPPING v6;
int v7;
int v8;
INT64(__fastcall *v9)(_OB_OPEN_REASON, CHAR, _EPROCESS *, VOID *, UINT64 *, UINT64);
void(__fastcall *v10)(_QWORD *);
DestinationString = 0i64;
memset((INT64)&result, 0i64);
result_2 |= 0x14u;
v9 = EtwpOpenRealTimeConnectionObject;
result = 120;
v10 = EtwpDeleteSessionDemuxObject;
v5 = 256;
v6 = EtwpGenericMapping;
v7 = 1;
v8 = 32;
RtlInitUnicodeString(&DestinationString, L"EtwSessionDemuxEntry", v0);
return ObCreateObjectTypeEx(&DestinationString, (__int64)&result, 0i64, 0i64, (__int64)&EtwpSessionDemuxObjectType);
}Referenced by:
EtwpInitialize