VOID __fastcall ObCleanupSecurityDescriptor(VOID *a1){ UINT8 v1; UINT8 v2; PVOID P; P = 0i64; v1 = 0; if( RtlGetDaclSecurityDescriptor(a1, &v1, (_ACL **)&P, &v2) >= 0 ) { if( v1 ) ExFreePoolWithTag(P, 0); } }