RtlInitializeBootStatusDataBlackBox
NTSTATUS __stdcall RtlInitializeBootStatusDataBlackBox(_HANDLE FileHandle){
NTSTATUS result;
_LARGE_INTEGER ByteOffset;
_IO_STATUS_BLOCK IoStatusBlock;
char Buffer[176];
IoStatusBlock = 0i64;
memset(Buffer, 0i64, sizeof(Buffer));
ByteOffset.QuadPart = 0i64;
result = ZwReadFile(FileHandle, 0, 0i64, 0i64, &IoStatusBlock, Buffer, 0xB0u, &ByteOffset, 0i64);
if( result >= 0 )
{
result = RtlpRecordBootStatusData(0, (__int64)Buffer, 0i64, 176i64);
if( result >= 0 )
return 0;
}
return result;
}Referenced by:
PoClearTransitionMarker