CmpCheckKeyOwnerForPca
UINT8 __fastcall CmpCheckKeyOwnerForPca(INT64 a1, INT64 a2, INT64 a3){
LIST_ENTRY *SecurityCacheEntryForKcbStack;
unsigned __int8 OwnerDefaulted;
PSID Owner;
Owner = 0i64;
if( CmpTrustedInstallerSid
&& (SecurityCacheEntryForKcbStack = CmpGetSecurityCacheEntryForKcbStack(a1, 0i64, a3),
RtlGetOwnerSecurityDescriptor(&SecurityCacheEntryForKcbStack[2], &Owner, &OwnerDefaulted) >= 0)
&& Owner )
{
return RtlEqualSid(CmpTrustedInstallerSid, Owner);
}
else
{
return 0;
}
}Referenced by:
CmpCheckOpenAccessOnKeyBody
CmpDoParseKey