EtwpCheckNotificationAccess

NTSTATUS __stdcall EtwpCheckNotificationAccess(_GUID *TargetGuid, _GUID *LoggerGuid){
  NTSTATUS result; 
  NTSTATUS v5; 
  __int64 v6; 

  result = EtwpCheckGuidAccess(TargetGuid, 0x80ui64, 0i64);
  if( result >= 0 )
  {
    result = EtwpCheckGuidAccess(LoggerGuid, 0x80ui64, 0i64);
    v5 = result;
    if( result >= 0 )
    {
      v6 = *(_QWORD *)&TargetGuid->Data1 - s_ProviderThreatInt;
      if( *(_QWORD *)&TargetGuid->Data1 == s_ProviderThreatInt )
        v6 = *(_QWORD *)TargetGuid->Data4 - 0x44D38D4D0F04D8F1i64;
      if( !v6 )
        return EtwpCheckSecurityLoggerAccess((INT64)KeGetCurrentThread()->ApcState.Process);
      return v5;
    }
  }
  return result;
}

Referenced by: