Something

init_tt using thread tracing, loader ./loader/ring3k-bin, client ./loader/ring3k-client
name_object name_object_t \??
open path = ??
on_open name_object_t::on_open ??
open path = DosDevices
alloc_object allocating object
name_object name_object_t \Device
open path = Device
on_open name_object_t::on_open Device
name_object name_object_t \Device\MailSlot
open path = Device\MailSlot
open path = MailSlot
on_open name_object_t::on_open MailSlot
name_object name_object_t \Security
open path = Security
on_open name_object_t::on_open Security
name_object name_object_t \BaseNamedObjects
open path = BaseNamedObjects
on_open name_object_t::on_open BaseNamedObjects
name_object name_object_t \Security\LSA_AUTHENTICATION_INITIALIZED
open path = Security\LSA_AUTHENTICATION_INITIALIZED
open path = LSA_AUTHENTICATION_INITIALIZED
on_open name_object_t::on_open LSA_AUTHENTICATION_INITIALIZED
name_object name_object_t \SeLsaInitEvent
open path = SeLsaInitEvent
on_open name_object_t::on_open SeLsaInitEvent
open path = Device\KsecDD
open path = KsecDD
open path = Device\NamedPipe
open path = NamedPipe
name_object name_object_t \KernelObjects
open path = KernelObjects
on_open name_object_t::on_open KernelObjects
name_object name_object_t \KernelObjects\CritSecOutOfMemoryEvent
open path = KernelObjects\CritSecOutOfMemoryEvent
open path = CritSecOutOfMemoryEvent
on_open name_object_t::on_open CritSecOutOfMemoryEvent
open path = Device\HarddiskVolume1
open path = HarddiskVolume1
open path = ??\c:
open path = c:
alloc_object allocating object
open path = ??\c:\winnt\system32\ntdll.dll
open path = c:\winnt\system32\ntdll.dll
open following \Device\HarddiskVolume1
open path = Device\HarddiskVolume1
open path = HarddiskVolume1
open directory_t::open winnt\system32\ntdll.dll
open_file name = winnt\system32\ntdll.dll
open_unicode_file open file : /proc/self/fd/3/winnt/system32/ntdll.dll
get_proc_address KiIntSystemCall
init_ntdll KiIntSystemCall = 00000000
open path = ??\c:\winnt\system32\smss.exe
open path = c:\winnt\system32\smss.exe
open following \Device\HarddiskVolume1
open path = Device\HarddiskVolume1
open path = HarddiskVolume1
open directory_t::open winnt\system32\smss.exe
open_file name = winnt\system32\smss.exe
open_unicode_file open file : /proc/self/fd/3/winnt/system32/smss.exe
eax 00000000 ebx 00000000 ecx 00000000 edx 00000000
esi 00000000 edi 00000000 ebp 00000000 efl 00000000
cs:eip 0000:00000000 ss:esp 0000:00000000
ds 0000 es 0000 fs 0000 gs 0000
client crashed in stub code :-(