SeQuerySecurityAttributesToken

NTSTATUS __stdcall SeQuerySecurityAttributesToken(
        VOID *pToken,
        const _UNICODE_STRING *pAttributes,
        UINT64 AttributeCount,
        VOID *pBuffer,
        UINT64 BufferLength,
        UINT64 *pReturnLength){
  UINT8 v7; 
  _ETHREAD *CurrentThread; 
  _UNICODE_STRING *v11; 
  NTSTATUS SecurityAttributesToken; 
  VOID *pBuffera; 
  UINT64 *v15; 

  v7 = AttributeCount;
  if( (_DWORD)BufferLength )
  {
    if( pBuffer )
    {
LABEL_3:
      CurrentThread = (_ETHREAD *)KeGetCurrentThread();
      --CurrentThread->Tcb.KernelApcDisable;
      ExAcquireResourceSharedLite(*((_QWORD *)pToken + 6), 1);
      LODWORD(v15) = BufferLength;
      LOBYTE(pBuffera) = 0;
      SecurityAttributesToken = SepInternalQuerySecurityAttributesTokenEx(
                                  pToken,
                                  v11,
                                  (UINT64)pAttributes,
                                  v7,
                                  pBuffera,
                                  (UINT64)pBuffer,
                                  v15);
      ExReleaseResourceLite(*((PERESOURCE *)pToken + 6));
      KeLeaveCriticalRegion();
      return SecurityAttributesToken;
    }
  }
  else if( !pBuffer )
  {
    goto LABEL_3;
  }
  return -1073741811;
}

Referenced by: