SepRegOpenKey

NTSTATUS __stdcall SepRegOpenKey(PWCHAR KeyName, UINT64 Attributes, PVOID *pHandle){
  ACCESS_MASK v3; 
  struct _UNICODE_STRING v6; 
  struct _OBJECT_ATTRIBUTES ObjectAttributes; 
  *(&ObjectAttributes.Length + 1) = 0;
  v3 = Attributes;
  *(&ObjectAttributes.Attributes + 1) = 0;
  v6 = 0i64;
  RtlInitUnicodeString(&v6, KeyName, (WCHAR)pHandle);
  ObjectAttributes.RootDirectory = 0i64;
  *pHandle = 0i64;
  ObjectAttributes.ObjectName = &v6;
  ObjectAttributes.Length = 48;
  ObjectAttributes.Attributes = 576;
  *(_OWORD *)&ObjectAttributes.SecurityDescriptor = 0i64;
  return ZwOpenKey(pHandle, v3, &ObjectAttributes);
}

Referenced by:

SepAdtOpenRegAndSetupNotification
SepBuildCapPolicyTable
SepReadAndInsertCaps
SepReadAndPopulateCapes
SepRegQueryDwordValue
SepRmFetchGlobalSacl