_ACCESS_STATE

Metadatacopy
struct _ACCESS_STATE {
    struct _LUID OperationID;/* 0x0  8 */
    unsigned char SecurityEvaluated;/* 0x8  1 */
    unsigned char GenerateAudit;/* 0x9  1 */
    unsigned char GenerateOnClose;/* 0xa  1 */
    unsigned char PrivilegesAllocated;/* 0xb  1 */
    unsigned long Flags;/* 0xc  4 */
    unsigned long RemainingDesiredAccess;/* 0x10  4 */
    unsigned long PreviouslyGrantedAccess;/* 0x14  4 */
    unsigned long OriginalDesiredAccess;/* 0x18  4 */
    /* 4 bytes padding */
    struct _SECURITY_SUBJECT_CONTEXT SubjectSecurityContext;/* 0x20  32 */
    /* ── cacheline 1 boundary (64 bytes) ── */
    void* SecurityDescriptor;/* 0x40  8 */
    void* AuxData;/* 0x48  8 */
    union {
        struct _INITIAL_PRIVILEGE_SET InitialPrivilegeSet;/* 0x50  44 */
        struct _PRIVILEGE_SET PrivilegeSet;/* 0x50  20 */
    } Privileges;/* 0x50  44 */
    unsigned char AuditPrivileges;/* 0x7c  1 */
    /* 3 bytes padding */
    /* ── cacheline 2 boundary (128 bytes) ── */
    struct _UNICODE_STRING ObjectName;/* 0x80  16 */
    struct _UNICODE_STRING ObjectTypeName;/* 0x90  16 */
};