RtlIsParentOfChildAppContainer
UINT8 __fastcall RtlIsParentOfChildAppContainer(VOID *ParentAppContainerSid, VOID *ChildAppContainerSid){
unsigned int v4;
UINT *v5;
int v7;
v7 = 0;
if( (int)RtlGetAppContainerSidType(ParentAppContainerSid, &v7) >= 0
&& v7 == 2
&& (int)RtlGetAppContainerSidType(ChildAppContainerSid, &v7) >= 0
&& v7 == 1 )
{
v4 = 1;
while( 1 )
{
v5 = RtlSubAuthoritySid(ParentAppContainerSid, v4);
if( *v5 != *RtlSubAuthoritySid(ChildAppContainerSid, v4) )
break;
if( ++v4 >= 8 )
return 1;
}
}
return 0;
}Referenced by:
SeTokenCanImpersonate
SepCheckCreateLowBox
SepIsParentOfChildAppContainer
SepSetTokenCapabilities
SepSetTokenPackage