SepBuildDefaultCap

NTSTATUS __stdcall SepBuildDefaultCap(_SEP_CENTRALIZED_ACCESS_POLICY **DefaultCap){
  int v1; 
  VOID **PoolWithTag; 
  __int128 v3; 
  _SEP_CENTRALIZED_ACCESS_POLICY_ENTRY *DefaultCape; 

  DefaultCape = 0i64;
  v1 = SepBuildDefaultCape(&DefaultCape);
  if( v1 >= 0 )
  {
    PoolWithTag = ExAllocatePoolWithTag(1ui64, 0x48ui64, 1884513619i64);
    if( PoolWithTag )
    {
      *PoolWithTag = 0i64;
      PoolWithTag[1] = 0i64;
      PoolWithTag[2] = 0i64;
      PoolWithTag[4] = 0i64;
      v3 = DefaultCapName;
      PoolWithTag[3] = 0i64;
      *((_DWORD *)PoolWithTag + 14) = 1;
      *(_OWORD *)(PoolWithTag + 5) = v3;
      *((_DWORD *)PoolWithTag + 15) = 1;
      PoolWithTag[8] = DefaultCape;
      SepRmDefaultCap = (__int64)PoolWithTag;
      return v1;
    }
    v1 = -1073741670;
  }
  if( DefaultCape )
    ExFreePoolWithTag(DefaultCape, 0x70536553u);
  return v1;
}

Referenced by:

SepRmDbInitialization