SeTokenIsElevated

NTSTATUS __stdcall SeTokenIsElevated(VOID *Token, UINT8 *TokenIsElevated){
  bool v3; 
  NTSTATUS v4; 
  void *v5; 
  NTSTATUS v6; 
  VOID *TokenInformation; 

  TokenInformation = 0i64;
  v3 = *((_DWORD *)Token + 48) == 2;
  *TokenIsElevated = 0;
  if( v3 && *((int *)Token + 49) < 2 )
    return 0;
  v4 = SeQueryInformationToken(Token, TokenElevation, &TokenInformation);
  v5 = TokenInformation;
  v6 = v4;
  if( v4 >= 0 && *(_DWORD *)TokenInformation )
    *TokenIsElevated = 1;
  if( v5 )
    ExFreePoolWithTag(v5, 0);
  return v6;
}

Referenced by:

SeTokenCanImpersonate