SepCopyTokenIntegrity
INT64 __fastcall SepCopyTokenIntegrity(INT64 a1){
INT64 TokenIntegrity;
__int64 v2;
INT64 result;
TokenIntegrity = SepLocateTokenIntegrity(a1);
if( TokenIntegrity )
{
*(_QWORD *)v2 = *(_QWORD *)TokenIntegrity;
result = *(unsigned int *)(TokenIntegrity + 8);
}
else
{
*(_QWORD *)v2 = SeUntrustedMandatorySid;
result = 96i64;
}
*(_DWORD *)(v2 + 8) = result;
return result;
}Referenced by:
AuthzBasepQueryTokenAttributeAndValues
NtQueryInformationToken
SeIsTokenAssignableToProcess
SeQueryInformationToken
SeQueryTokenIntegrity
SeTokenCanImpersonate
SepAdjustPrivileges
SepValidLabelSubjectContext