CmpEffectiveTokenForSubject

INT64 __fastcall CmpEffectiveTokenForSubject(INT64 *a1, _DWORD *a2){
  INT64 v2; 

  v2 = *a1;
  if( !*a1 )
    v2 = a1[2];
  if( a2 )
    *a2 = (*a1 != 0) + 1;
  return v2;
}

Referenced by:

CmpBuildAdminInformation
CmpExamineSaclForAuditEvent
CmpGetVirtualizationID
CmpReportAuditVirtualizationEvent