SepCopyTokenIntegrity

INT64 __fastcall SepCopyTokenIntegrity(INT64 a1){
  INT64 TokenIntegrity; 
  __int64 v2; 
  INT64 result; 
  TokenIntegrity = SepLocateTokenIntegrity(a1);
  if( TokenIntegrity )
  {
    *(_QWORD *)v2 = *(_QWORD *)TokenIntegrity;
    result = *(unsigned int *)(TokenIntegrity + 8);
  }
  else
  {
    *(_QWORD *)v2 = SeUntrustedMandatorySid;
    result = 96i64;
  }
  *(_DWORD *)(v2 + 8) = result;
  return result;
}

Referenced by:

AuthzBasepQueryTokenAttributeAndValues
NtQueryInformationToken
SeIsTokenAssignableToProcess
SeQueryInformationToken
SeQueryTokenIntegrity
SeTokenCanImpersonate
SepAdjustPrivileges
SepValidLabelSubjectContext