SeTokenIsElevated
NTSTATUS __stdcall SeTokenIsElevated(VOID *Token, UINT8 *TokenIsElevated){
bool v3;
NTSTATUS v4;
void *v5;
NTSTATUS v6;
VOID *TokenInformation;
TokenInformation = 0i64;
v3 = *((_DWORD *)Token + 48) == 2;
*TokenIsElevated = 0;
if( v3 && *((int *)Token + 49) < 2 )
return 0;
v4 = SeQueryInformationToken(Token, TokenElevation, &TokenInformation);
v5 = TokenInformation;
v6 = v4;
if( v4 >= 0 && *(_DWORD *)TokenInformation )
*TokenIsElevated = 1;
if( v5 )
ExFreePoolWithTag(v5, 0);
return v6;
}Referenced by:
SeTokenCanImpersonate