CmpCreateRegistryThread
INT64 __stdcall CmpCreateRegistryThread(UINT64 ReasonCode, UINT64 States){
KSTART_ROUTINE *v2;
void *v3;
INT64 result;
OBJECT_ATTRIBUTES v5;
*(_QWORD *)&v5.Length = 48i64;
v5.RootDirectory = 0i64;
v5.ObjectName = 0i64;
*(_QWORD *)&v5.Attributes = 512i64;
*(_OWORD *)&v5.SecurityDescriptor = 0i64;
LODWORD(result) = PsCreateSystemThreadEx(
(PVOID *)ReasonCode,
0x1FFFFFui64,
&v5,
(PVOID)CmpRegistryProcess,
0i64,
v2,
v3,
0i64,
0i64);
return result;
}Referenced by:
CmCompleteRegistryInitialization
CmpInitializeLazyWriters
CmpInitializeRegistryProcess
CmpInitializeSystemHivesLoad