SeReleaseSid
VOID __stdcall SeReleaseSid(VOID *CapturedSid, CHAR RequestorMode, UINT8 ForceCapture){
if( !RequestorMode && ForceCapture == 1 || RequestorMode == 1 )
ExFreePoolWithTag(CapturedSid, 0);
}Referenced by:
AlpcpConnectPort
AlpcpPortQueryConnectedSidInfo
ExpWnfReleaseCapturedScopeInstanceId
NtCreateLowBoxToken
NtCreateTokenEx
NtSecureConnectPort
NtSetInformationToken
SeAccessCheckByTypeWithAdminlessChecks
SepAccessCheckAndAuditAlarmWithAdminlessChecks