設置權限
v9 = operator new(0x1Cu);
v10 =(struct _TOKEN_PRIVILEGES
*)v9;
if (!v9
)
{
v15 =-2147024882;
"Failedto allocate memory for privilege tokens.");
goto LABEL_342;
}
*v9=
0;
v11 =v9 +
3;
*v9=
2;
v12 =0;
do
{
v13 =PRIVILEGES_BACKUP_RESTORE[v12];
++v12;
*(v11
-
2) = v13;
*(v11
-
1) =
(unsigned__int64)v13
>>
32;
*v11=
2;
v11 +=3;
}
while (v12 <
2);
v14 =SetPrivileges((int)v11, v10, (int)v11);
v15 = v14;
if (v14 <
0)
"Failedto set privileges.");
operator delete(v10);
//----- (10095F72)--------------------------------------------------------
signed int __fastcall SetPrivileges(int a1,
struct _TOKEN_PRIVILEGES *a2,
int a3)
{
v3 =a2;
v4 =0;
TokenHandle =0;
BufferLength =
0;
if (a2->PrivilegeCount
)
{
v5 =GetCurrentProcess();
if (OpenProcessToken(v5, 0x20028u,
&TokenHandle))
{
if (!AdjustTokenPrivileges(TokenHandle,
0,v3, BufferLength, 0,
&BufferLength)
)
{
if ( GetLastError()
==
122 )
{
v9 =(struct _TOKEN_PRIVILEGES
*)operatornew(BufferLength);
if ( v9
)
{
v9->PrivilegeCount=
0;
if ( !AdjustTokenPrivileges(TokenHandle,
0,v3, BufferLength, v9, &BufferLength)
)
{
v10 = GetLastError();
v4 = v10;
v11 = v10
<0;
if ( v10
>0
)
{
v4 =
(unsigned__int16)v10
| 0x80070000;
v11 = v4
<0;
}
if ( !v11
)
v4 =
-2147467259;
"Failedto adjust token privileges after resizing to accommodate modifiedprivileges.");
}
operator delete(v9);
}
else
{
v4 =
-2147024882;
"Failedto allocate memory for modified privilege tokens.");
}
}
else
{
v12 =GetLastError();
v4 =v12;
v13 =v12
< 0;
if ( v12 >0
)
{
v4 =
(unsigned __int16)v12
| 0x80070000;
v13 = v4
<0;
}
if ( !v13
)
v4 =
-2147467259;
"Failedto adjust token privileges.");
}
}
if (TokenHandle && TokenHandle
!=
(HANDLE)-1
)
CloseHandle(TokenHandle);
}
else
{
v7 =GetLastError();
v4 =v7;
v8 =v7 <
0;
if (v7 >
0)
{
v4 =(unsigned __int16)v7
|
0x80070000;
v8 =v4
< 0;
}
if (!v8
)
v4 =-2147467259;
"Failedto get process token to set privileges into.");
}
}
return v4;
}
TOKEN_PRIVILEGEScontains information about a set of privileges for an access token.
typedef struct_TOKEN_PRIVILEGES
{
ULONGPrivilegeCount; //數組元素的個數
LUID_AND_ATTRIBUTESPrivileges[ANYSIZE_ARRAY]; //數組.類型爲LUID_AND_ATTRIBUTES
}TOKEN_PRIVILEGES, *PTOKEN_PRIVILEGES;
有關LUID_AND_ATTRIBUTES,請查閱MSDN.
PrivilegeCount
指定特權數組的個數(因爲下一個參數是一個數組)
Privileges
一個LUID_AND_ATTRIBUTES結構體.每個結構體包括LUID和特權的屬性. 特權的屬性可以是下列值的組合：
|
屬性 |
描述 |
|
SE_PRIVILEGE_ENABLED_BY_DEFAULT |
特權默認啓用 |
|
SE_PRIVILEGE_ENABLED |
特權啓用. |
|
SE_PRIVILEGE_USED_FOR_ACCESS |
特權被用來訪問一個對象或服務。 這個標誌 被用於 標識有關特權，因爲 通過一組客戶端應用程序，可能包含不必要的特權 |