_ACCESS_STATE

//0xa0 bytes (sizeof) struct _ACCESS_STATE { struct _LUID OperationID; //0x0 UCHAR SecurityEvaluated; //0x8 UCHAR GenerateAudit; //0x9 UCHAR GenerateOnClose; //0xa UCHAR PrivilegesAllocated; //0xb ULONG Flags; //0xc ULONG RemainingDesiredAccess; //0x10 ULONG PreviouslyGrantedAccess; //0x14 ULONG OriginalDesiredAccess; //0x18 struct _SECURITY_SUBJECT_CONTEXT SubjectSecurityContext; //0x20 VOID* SecurityDescriptor; //0x40 VOID* AuxData; //0x48 union { struct _INITIAL_PRIVILEGE_SET InitialPrivilegeSet; //0x50 struct _PRIVILEGE_SET PrivilegeSet; //0x50 } Privileges; //0x50 UCHAR AuditPrivileges; //0x7c struct _UNICODE_STRING ObjectName; //0x80 struct _UNICODE_STRING ObjectTypeName; //0x90 };