Search notes:

Windows CRT: gs_support.c

gs_support.c defines the __security_init_cookie() function which is called at startup to initialize the global buffer overrun security cookie if compiled with /GS.
The global variable __security_cookie is defined in gs_cookie.c.

See also

Some CRT sources

Index