SepRegOpenKey
NTSTATUS __stdcall SepRegOpenKey(PWCHAR KeyName, UINT64 Attributes, PVOID *pHandle){
ACCESS_MASK v3;
struct _UNICODE_STRING v6;
struct _OBJECT_ATTRIBUTES ObjectAttributes;
*(&ObjectAttributes.Length + 1) = 0;
v3 = Attributes;
*(&ObjectAttributes.Attributes + 1) = 0;
v6 = 0i64;
RtlInitUnicodeString(&v6, KeyName, (WCHAR)pHandle);
ObjectAttributes.RootDirectory = 0i64;
*pHandle = 0i64;
ObjectAttributes.ObjectName = &v6;
ObjectAttributes.Length = 48;
ObjectAttributes.Attributes = 576;
*(_OWORD *)&ObjectAttributes.SecurityDescriptor = 0i64;
return ZwOpenKey(pHandle, v3, &ObjectAttributes);
}Referenced by:
SepAdtOpenRegAndSetupNotification
SepBuildCapPolicyTable
SepReadAndInsertCaps
SepReadAndPopulateCapes
SepRegQueryDwordValue
SepRmFetchGlobalSacl