SeCreateAccessState

INT64 __fastcall SeCreateAccessState(
        _ACCESS_STATE *AccessState,
        _AUX_ACCESS_DATA *AuxData,
        UINT64 DesiredAccess,
        _GENERIC_MAPPING *GenericMapping){
  UINT64 DesiredAccessa; 
  LODWORD(DesiredAccessa) = DesiredAccess;
  return SeCreateAccessStateEx(
           (_ETHREAD *)KeGetCurrentThread(),
           *((_EPROCESS **)KeGetCurrentThread() + 23),
           AccessState,
           AuxData,
           DesiredAccessa,
           GenericMapping);
}

Referenced by: