ZwQueryInformationToken

NTSTATUS __stdcall ZwQueryInformationToken(
        HANDLE TokenHandle,
        TOKEN_INFORMATION_CLASS TokenInformationClass,
        PVOID TokenInformation,
        ULONG TokenInformationLength,
        PULONG ReturnLength){
  NTSTATUS result; 
  _disable();
  __readeflags();
  KiServiceInternal();
  return result;
}

Referenced by:

ExpFirmwareAccessAppContainerCheck
OpenGlobalizationUserSettingsKey_ForMua
RtlCheckTokenCapability
RtlFormatCurrentUserKeyPath
SysCtxRegOpenCurrentUserKey