EtwpCheckProviderLoggingAccess

NTSTATUS __stdcall EtwpCheckProviderLoggingAccess(_ETW_REG_ENTRY *RegEntry, _GUID *LoggerGuid, UINT8 LoggerSecure){
  NTSTATUS v4; 
  _SECURITY_SUBJECT_CONTEXT SubjectContext; 

  memset(&SubjectContext, 0, sizeof(SubjectContext));
  if( !LoggerSecure || (RegEntry->Flags & 1) != 0 )
    return 0;
  SeCaptureSubjectContextEx(0i64, RegEntry->Process, &SubjectContext);
  v4 = EtwpCheckGuidAccess(LoggerGuid, 0x200ui64, &SubjectContext);
  SeReleaseSubjectContext(&SubjectContext);
  return v4;
}

Referenced by: