EtwpGetSecurityDescriptorByGuid
UINT8 __fastcall EtwpGetSecurityDescriptorByGuid(const _GUID *Guid, VOID **SecurityDescriptor){
WCHAR v3;
struct _UNICODE_STRING DestinationString;
wchar_t pszDest[40];
DestinationString = 0i64;
RtlStringCbPrintfW(pszDest, 0x4Cui64, (WCHAR *)L"%08x-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x");
RtlInitUnicodeString(&DestinationString, pszDest, v3);
EtwpGetGuidSecurityDescriptor(&DestinationString, SecurityDescriptor);
if( *SecurityDescriptor )
return 1;
*SecurityDescriptor = EtwpDefaultTraceSecurityDescriptor;
return 0;
}Referenced by:
EtwpAccessCheckFromState
EtwpAllocGuidEntry
EtwpCheckGuidAccess
EtwpStartLogger
EtwpUpdateTrace