SeTokenIsAdmin

UINT8 __fastcall SeTokenIsAdmin(VOID *Token){
  PSID v2; 
  UINT8 v3; 
  if( (*((_DWORD *)Token + 50) & 0x4000) != 0 || *((_DWORD *)Token + 48) == 2 && *((int *)Token + 49) < 2 )
    return 0;
  v2 = SeAliasAdminsSid;
  v3 = SepSidInToken(Token, 0i64, SeAliasAdminsSid, 0, 0, 0);
  if( v3 )
  {
    if( SeTokenIsRestricted(Token) )
      return SepSidInToken(Token, 0i64, v2, 0, 1u, 0);
  }
  return v3;
}

Referenced by:

EtwpCoverageUserIsAdmin
IoComputeRedirectionTrustLevel
IopParseDevice
MiIsUserQueryVmCallerTrusted
PspIsContextAdmin
SepMandatorySubProcessToken