SepScheduleImageVerificationCallbacks
NTSTATUS __stdcall SepScheduleImageVerificationCallbacks(_BDCB_IMAGE_INFORMATION *SigningInfo, UINT64 SigningInfoSize){
int v2;
VOID **PoolWithTag;
NTSTATUS v5;
v2 = SigningInfoSize;
PoolWithTag = ExAllocatePoolWithTag(0x200ui64, (unsigned int)SigningInfoSize + 48i64, 1668499779i64);
v5 = 0;
if( !PoolWithTag )
return -1073741801;
PoolWithTag[3] = PoolWithTag;
PoolWithTag[2] = SepImageVerificationCallbackWorker;
*PoolWithTag = 0i64;
PoolWithTag[4] = SigningInfo;
*((_DWORD *)PoolWithTag + 10) = v2;
ExQueueWorkItem((PWORK_QUEUE_ITEM)PoolWithTag, DelayedWorkQueue);
return v5;
}Referenced by:
SeValidateImageHeader