SepBuildDefaultCape
NTSTATUS __stdcall SepBuildDefaultCape(_SEP_CENTRALIZED_ACCESS_POLICY_ENTRY **DefaultCape){
NTSTATUS v1;
VOID **PoolWithTag;
__int128 v4;
__int64 v5;
v1 = 0;
PoolWithTag = ExAllocatePoolWithTag(1ui64, 0x38ui64, 1884513619i64);
if( !PoolWithTag )
return -1073741670;
v4 = DefaultCapeName;
v5 = SeDefaultCapeSd;
PoolWithTag[2] = 0i64;
*(_OWORD *)PoolWithTag = v4;
PoolWithTag[6] = (VOID *)1;
PoolWithTag[3] = 0i64;
PoolWithTag[5] = 0i64;
PoolWithTag[4] = (VOID *)v5;
*DefaultCape = (_SEP_CENTRALIZED_ACCESS_POLICY_ENTRY *)PoolWithTag;
return v1;
}Referenced by:
SepBuildDefaultCap