EtwpAccessCheckFromState
NTSTATUS __stdcall EtwpAccessCheckFromState(_GUID *Guid, _TOKEN_ACCESS_INFORMATION *Token){
_TOKEN_ACCESS_INFORMATION *v2;
_TOKEN_ACCESS_INFORMATION *v3;
_KPROCESSOR_MODE AccessMode;
PSECURITY_DESCRIPTOR SecurityDescriptor[3];
int AccessStatus;
unsigned int GrantedAccess;
AccessStatus = 0;
GrantedAccess = 0;
v3 = v2;
SecurityDescriptor[0] = 0i64;
EtwpGetSecurityDescriptorByGuid(Guid, SecurityDescriptor);
LOBYTE(AccessMode) = 1;
SeAccessCheckFromState(
SecurityDescriptor[0],
v3,
0i64,
128,
0,
0i64,
(PGENERIC_MAPPING)&EtwpGenericMapping,
AccessMode,
&GrantedAccess,
&AccessStatus);
EtwpFreeSecurityDescriptor(SecurityDescriptor);
return AccessStatus;
}Referenced by:
EtwpAddRegEntryToGroup