SepBuildDefaultCap
NTSTATUS __stdcall SepBuildDefaultCap(_SEP_CENTRALIZED_ACCESS_POLICY **DefaultCap){
int v1;
VOID **PoolWithTag;
__int128 v3;
_SEP_CENTRALIZED_ACCESS_POLICY_ENTRY *DefaultCape;
DefaultCape = 0i64;
v1 = SepBuildDefaultCape(&DefaultCape);
if( v1 >= 0 )
{
PoolWithTag = ExAllocatePoolWithTag(1ui64, 0x48ui64, 1884513619i64);
if( PoolWithTag )
{
*PoolWithTag = 0i64;
PoolWithTag[1] = 0i64;
PoolWithTag[2] = 0i64;
PoolWithTag[4] = 0i64;
v3 = DefaultCapName;
PoolWithTag[3] = 0i64;
*((_DWORD *)PoolWithTag + 14) = 1;
*(_OWORD *)(PoolWithTag + 5) = v3;
*((_DWORD *)PoolWithTag + 15) = 1;
PoolWithTag[8] = DefaultCape;
SepRmDefaultCap = (__int64)PoolWithTag;
return v1;
}
v1 = -1073741670;
}
if( DefaultCape )
ExFreePoolWithTag(DefaultCape, 0x70536553u);
return v1;
}Referenced by:
SepRmDbInitialization