RtlNtStatusToDosError
NTSTATUS __fastcall RtlNtStatusToDosError(UINT64 a1){
_ETHREAD *CurrentThread;
_DWORD *Teb;
CurrentThread = (_ETHREAD *)KeGetCurrentThread();
if( (CurrentThread->Tcb._bf_0 & 0x400) == 0 && CurrentThread->Tcb.ApcStateIndex != 1 )
{
Teb = CurrentThread->Tcb.Teb;
if( Teb )
Teb[1172] = a1;
}
return RtlNtStatusToDosErrorNoTeb(a1);
}Referenced by:
EtwStartAutoLogger
EtwpEnableAutoLoggerProvider
EtwpEnumerateAutologgerPath
EtwpEnumerateKeyProviders
LocalConvertAclToString
LocalConvertSDToStringSD_Rev1
LocalConvertStringSDToSD_Rev1
LocalGetAclForString
LocalGetSidForString
LocalGetStringForSid