SepInitializationPhase0
UINT8 __stdcall SepInitializationPhase0(){
_EPROCESS *Process;
VOID *SystemToken;
if( !SepVariableInitialization() || !SepRmDbInitialization() || !SepTokenInitialization() || !SepInitializeWorkList() )
return 0;
*($66B5187701DB455CD8F8862345C5A268 *)((char *)&KeGetCurrentThread()[1].116 + 4) = 0i64;
_InterlockedAnd((volatile signed __int32 *)&KeGetCurrentThread()[1].gapD8[8], 0xFFFFFFF7);
ObInitializeFastReference(&KeGetCurrentThread()->ApcState.Process->Token, 0i64);
Process = KeGetCurrentThread()->ApcState.Process;
SystemToken = SeMakeSystemToken();
ObInitializeFastReference(&Process->Token, SystemToken);
SepMandatoryObjectTypePolicyLock._bf_0 = 0i64;
SepDefaultMandatorySid = (INT64)SeMediumMandatorySid;
return KeGetCurrentThread()->ApcState.Process->Token.Value != 0;
}Referenced by:
SeInitSystem