SepBuildCapPolicyTable

INT64 __fastcall SepBuildCapPolicyTable(INT64 a1, _QWORD *a2){
  unsigned int v2; 
  HANDLE pHandle; 
  HANDLE KeyHandle; 
  HANDLE Handle; 
  *a2 = 0i64;
  KeyHandle = 0i64;
  pHandle = 0i64;
  Handle = 0i64;
  if( SepRegOpenKey(
         (PWCHAR)L"\\Registry\\Machine\\System\\CurrentControlSet\\Control\\Lsa\\CentralizedAccessPolicies",
         0x201ui64,
         &KeyHandle) < 0
    || SepRegOpenKey(
         (PWCHAR)L"\\Registry\\Machine\\System\\CurrentControlSet\\Control\\Lsa\\CentralizedAccessPolicies\\CAPEs",
         0x201ui64,
         &pHandle) < 0
    || SepRegOpenKey(
         (PWCHAR)L"\\Registry\\Machine\\System\\CurrentControlSet\\Control\\Lsa\\CentralizedAccessPolicies\\CAPs",
         0x201ui64,
         &Handle) < 0 )
  {
    v2 = 0;
  }
  else
  {
    v2 = SepReadAndPopulateCapes(pHandle);
  }
  if( Handle )
    ZwClose(Handle);
  if( pHandle )
    ZwClose(pHandle);
  if( KeyHandle )
    ZwClose(KeyHandle);
  return v2;
}

Referenced by: