RtlNtStatusToDosError
ULONG __stdcall RtlNtStatusToDosError(NTSTATUS Status){
_ETHREAD *CurrentThread;
__int64 v2;
CurrentThread = (_ETHREAD *)KeGetCurrentThread();
if( (*((_DWORD *)CurrentThread + 29) & 0x400) == 0 && *((_BYTE *)CurrentThread + 586) != 1 )
{
v2 = *((_QWORD *)CurrentThread + 30);
if( v2 )
*(_DWORD *)(v2 + 4688) = Status;
}
return RtlNtStatusToDosErrorNoTeb(*(INT64 *)&Status);
}Referenced by:
EtwStartAutoLogger
EtwpEnableAutoLoggerProvider
EtwpEnumerateAutologgerPath
EtwpEnumerateKeyProviders
LocalConvertAclToString
LocalConvertSDToStringSD_Rev1
LocalConvertStringSDToSD_Rev1
LocalGetAclForString
LocalGetSidForString
LocalGetStringForSid