in PPLGuard/utils.cpp [458:473]
BOOL TokenGetSidAsString(HANDLE hToken, LPWSTR* ppwszStringSid)
{
BOOL bReturnValue = FALSE;
PSID pSid = NULL;
if (TokenGetSid(hToken, &pSid))
{
if (ConvertSidToStringSid(pSid, ppwszStringSid))
{
bReturnValue = TRUE;
}
LocalFree(pSid);
}
return bReturnValue;
}