NTSTATUS __stdcall PopValidateContextMembership(VOID *Sid){ NTSTATUS result; UINT8 IsMember; IsMember = 0; result = RtlCheckTokenMembership(0i64, Sid, &IsMember); if( result < 0 || !IsMember ) return -1073741790; return result; }