SepCanTokenMatchAllPackageSid

BOOL __fastcall SepCanTokenMatchAllPackageSid(INT64 a1){
  INT64 v2; 
  UINT8 v3; 
  char v4; 
  bool v5; 
  _ETHREAD *CurrentThread; 
  BOOL SecurityAttributeAndValues; 
  __int128 v8; 
  INT64 result[2]; 
  __int128 v10; 
  _QWORD *v11; 
  memset((INT64)result, 0i64);
  *(_QWORD *)&v8 = 2359330i64;
  *((_QWORD *)&v8 + 1) = L"WIN:
  v4 = 0;
  v5 = 1;
  result[1] = *(_QWORD *)(a1 + 776);
  v10 = v8;
  if( KeGetCurrentIrql() < 2u )
  {
    CurrentThread = (_ETHREAD *)KeGetCurrentThread();
    --*((_WORD *)CurrentThread + 242);
    LOBYTE(v2) = 1;
    ExAcquireResourceSharedLite(*(PERESOURCE *)(a1 + 48), v2);
    v4 = 1;
  }
  SecurityAttributeAndValues = AuthzBasepQuerySecurityAttributeAndValues((INT64)result, v2, v3);
  if( SecurityAttributeAndValues >= 0 )
  {
    SecurityAttributeAndValues = (int)v11;
    v5 = *v11 == 0i64;
  }
  if( v4 )
  {
    ExReleaseResourceLite(*(PERESOURCE *)(a1 + 48));
    KeLeaveCriticalRegion();
  }
  LOBYTE(SecurityAttributeAndValues) = v5;
  return SecurityAttributeAndValues;
}

Referenced by: