SeAccessCheckFromState
UINT8 __stdcall SeAccessCheckFromState(
PVOID SecurityDescriptor,
TOKEN_ACCESS_INFORMATION *PrimaryTokenInformation,
TOKEN_ACCESS_INFORMATION *ClientTokenInformation,
UINT64 DesiredAccess,
UINT64 PreviouslyGrantedAccess,
PRIVILEGE_SET **Privileges,
GENERIC_MAPPING *GenericMapping,
INT8 AccessMode,
UINT64 *GrantedAccess,
INT64 *AccessStatus){
unsigned int v13;
INT64 *v14;
UINT64 v16;
INT64 v17[148];
INT64 result[148];
v13 = DesiredAccess;
memset((INT64)result, 0i64);
memset((INT64)v17, 0i64);
SepTokenFromAccessInformation((UINT64 **)PrimaryTokenInformation, (INT64)result);
v14 = 0i64;
if( ClientTokenInformation )
{
SepTokenFromAccessInformation((UINT64 **)ClientTokenInformation, (INT64)v17);
v14 = v17;
}
LODWORD(v16) = PreviouslyGrantedAccess;
return SeAccessCheckFromStateEx(
SecurityDescriptor,
result,
v14,
v13,
v16,
Privileges,
GenericMapping,
AccessMode,
GrantedAccess,
AccessStatus);
}Referenced by:
CmpCheckAdminAccess
EtwpAccessCheckFromState