SeQueryServerSiloToken
INT64 __stdcall SeQueryServerSiloToken(PVOID InToken, _EJOB **ServerSilo){
_ETHREAD *CurrentThread;
_EJOB **v3;
unsigned int v5;
CurrentThread = (_ETHREAD *)KeGetCurrentThread();
v3 = ServerSilo;
--*((_WORD *)CurrentThread + 242);
LOBYTE(ServerSilo) = 1;
ExAcquireResourceSharedLite(*((PERESOURCE *)InToken + 6), (BOOL)ServerSilo);
v5 = *((_DWORD *)InToken + 30);
ExReleaseResourceLite(*((PERESOURCE *)InToken + 6));
KeLeaveCriticalRegion();
return PsGetSiloBySessionId(v5, v3);
}Referenced by:
NtCreateUserProcess
SepCreateClientSecurityEx
SepUpdateSiloInClientSecurity