PspIumVerifyParentSd

NTSTATUS __fastcall PspIumVerifyParentSd(__int64 a1, int a2, PVOID *a3){
  NTSTATUS result; 
  _KPROCESSOR_MODE AccessMode; 
  _SECURITY_SUBJECT_CONTEXT SubjectContext; 
  int AccessStatus; 
  unsigned int GrantedAccess; 

  AccessStatus = a2;
  GrantedAccess = 0;
  memset(&SubjectContext, 0, sizeof(SubjectContext));
  result = SeConvertStringSecurityDescriptorToSecurityDescriptor(a3);
  AccessStatus = result;
  if( result >= 0 )
  {
    SeCaptureSubjectContext((INT64)&SubjectContext);
    LOBYTE(AccessMode) = 1;
    SeAccessCheck(
      0i64,
      &SubjectContext,
      0,
      128,
      0,
      0i64,
      &PsTrustletGenericMapping,
      AccessMode,
      &GrantedAccess,
      &AccessStatus);
    SeReleaseSubjectContext(&SubjectContext);
    ExFreePoolWithTag(0i64, 0);
    return AccessStatus;
  }
  return result;
}

Referenced by: