EtwpIsGuidAllowed
UINT8 __stdcall EtwpIsGuidAllowed(_WMI_LOGGER_CONTEXT *LoggerContext, const VOID *Guid, _GUID *a3){
_EX_PUSH_LOCK *p_LoggerLock;
bool v6;
p_LoggerLock = &LoggerContext->LoggerLock;
ExAcquirePushLockSharedEx(&LoggerContext->LoggerLock, 0i64);
if( LoggerContext->DisallowedGuids.Count )
v6 = bsearch(
Guid,
LoggerContext->DisallowedGuids.Guids,
LoggerContext->DisallowedGuids.Count,
0x10u,
(int(__cdecl *)(const void *, const void *))EtwpCompareGuid) == 0i64;
else
v6 = 1;
if( _InterlockedCompareExchange64(&p_LoggerLock->_bf_0, 0i64, 17i64) != 17 )
ExfReleasePushLockShared(p_LoggerLock);
KeAbPostRelease(p_LoggerLock);
return v6;
}Referenced by:
EtwpAddRegEntryToGroup
EtwpDisallowedGuidAddition
EtwpDisallowedGuidRemoval
EtwpIsRegEntryAllowed