vxunderground-VX-API/VX-API/GetCurrentUserSid.cpp

#include "Win32Helper.h"

DWORD GetTokenInformationBufferSize(HANDLE hToken)
{
	PTOKEN_GROUPS TokenGroup = NULL;
	DWORD dwReturn = ERROR_SUCCESS;

	GetTokenInformation(hToken, TokenGroups, (LPVOID)TokenGroup, 0, &dwReturn);

	return dwReturn;
}

LPWSTR GetCurrentUserSidW(HANDLE hToken, BOOL DisposeProcessHandle)
{
	typedef BOOL(WINAPI* CONVERTSIDTOSTRINGSIDW)(PSID, LPWSTR*);
	CONVERTSIDTOSTRINGSIDW ConvertSidToStringSidW;
	PSID Sid = NULL;
	PTOKEN_GROUPS TokenGroup = NULL;
	DWORD dwError = ERROR_SUCCESS, dwIndex = ERROR_SUCCESS;
	BOOL bFlag = FALSE;
	LPWSTR pSid = NULL;
	HMODULE hAdvapi = NULL;

	hAdvapi = LoadLibraryW(L"Advapi32.dll");
	if (hAdvapi == NULL)
		goto EXIT_ROUTINE;

	ConvertSidToStringSidW = (CONVERTSIDTOSTRINGSIDW)GetProcAddressA((DWORD64)hAdvapi, "ConvertSidToStringSidW");
	if (!ConvertSidToStringSidW)
		goto EXIT_ROUTINE;

	if (!OpenProcessToken(GetCurrentProcessEx(), TOKEN_ALL_ACCESS, &hToken))
		return NULL;

	dwError = GetTokenInformationBufferSize(hToken);
	if (dwError == 0)
		goto EXIT_ROUTINE;

	TokenGroup = (PTOKEN_GROUPS)HeapAlloc(GetProcessHeapEx(), HEAP_ZERO_MEMORY, dwError);
	if (TokenGroup == NULL)
		goto EXIT_ROUTINE;

	if (!GetTokenInformation(hToken, TokenGroups, (LPVOID)TokenGroup, dwError, &dwError))
		goto EXIT_ROUTINE;

	for (; dwIndex < TokenGroup->GroupCount; dwIndex++)
	{
		if ((TokenGroup->Groups[dwIndex].Attributes & SE_GROUP_LOGON_ID) == SE_GROUP_LOGON_ID)
		{
			if (!IsValidSid(TokenGroup->Groups[dwIndex].Sid))
				continue;

			dwError = GetLengthSid(TokenGroup->Groups[dwIndex].Sid);

			Sid = (PSID)HeapAlloc(GetProcessHeapEx(), HEAP_ZERO_MEMORY, dwError);
			if (Sid == NULL)
				goto EXIT_ROUTINE;

			if (!CopySid(dwError, Sid, TokenGroup->Groups[dwIndex].Sid))
				goto EXIT_ROUTINE;

			if (!ConvertSidToStringSidW(Sid, &pSid))
				goto EXIT_ROUTINE;
			else
				break;
		}
	}

	bFlag = TRUE;

EXIT_ROUTINE:

	if (!bFlag)
		dwError = GetLastErrorFromTeb();

	if (TokenGroup)
		HeapFree(GetProcessHeapEx(), HEAP_ZERO_MEMORY, TokenGroup);

	if (Sid)
		HeapFree(GetProcessHeapEx(), HEAP_ZERO_MEMORY, Sid);

	if (hAdvapi)
		FreeLibrary(hAdvapi);

	if (DisposeProcessHandle)
	{
		if (hToken)
			CloseHandle(hToken);
	}

	return (bFlag ? pSid : NULL);
}

LPSTR GetCurrentUserSidA(HANDLE hToken, BOOL DisposeProcessHandle)
{
	typedef BOOL(WINAPI* CONVERTSIDTOSTRINGSIDA)(PSID, LPSTR*);
	CONVERTSIDTOSTRINGSIDA ConvertSidToStringSidA;
	PSID Sid = NULL;
	PTOKEN_GROUPS TokenGroup = NULL;
	DWORD dwError = ERROR_SUCCESS, dwIndex = ERROR_SUCCESS;
	BOOL bFlag = FALSE;
	LPSTR pSid = NULL;
	HMODULE hAdvapi = NULL;

	hAdvapi = LoadLibraryW(L"Advapi32.dll");
	if (hAdvapi == NULL)
		goto EXIT_ROUTINE;

	ConvertSidToStringSidA = (CONVERTSIDTOSTRINGSIDA)GetProcAddressA((DWORD64)hAdvapi, "ConvertSidToStringSidA");
	if (!ConvertSidToStringSidA)
		goto EXIT_ROUTINE;

	if (!OpenProcessToken(GetCurrentProcessEx(), TOKEN_ALL_ACCESS, &hToken))
		return NULL;

	dwError = GetTokenInformationBufferSize(hToken);
	if (dwError == 0)
		goto EXIT_ROUTINE;

	TokenGroup = (PTOKEN_GROUPS)HeapAlloc(GetProcessHeapEx(), HEAP_ZERO_MEMORY, dwError);
	if (TokenGroup == NULL)
		goto EXIT_ROUTINE;

	if (!GetTokenInformation(hToken, TokenGroups, (LPVOID)TokenGroup, dwError, &dwError))
		goto EXIT_ROUTINE;

	for (; dwIndex < TokenGroup->GroupCount; dwIndex++)
	{
		if ((TokenGroup->Groups[dwIndex].Attributes & SE_GROUP_LOGON_ID) == SE_GROUP_LOGON_ID)
		{
			if (!IsValidSid(TokenGroup->Groups[dwIndex].Sid))
				continue;

			dwError = GetLengthSid(TokenGroup->Groups[dwIndex].Sid);

			Sid = (PSID)HeapAlloc(GetProcessHeapEx(), HEAP_ZERO_MEMORY, dwError);
			if (Sid == NULL)
				goto EXIT_ROUTINE;

			if (!CopySid(dwError, Sid, TokenGroup->Groups[dwIndex].Sid))
				goto EXIT_ROUTINE;

			if (!ConvertSidToStringSidA(Sid, &pSid))
				goto EXIT_ROUTINE;
			else
				break;
		}
	}

	bFlag = TRUE;

EXIT_ROUTINE:

	if (!bFlag)
		dwError = GetLastErrorFromTeb();

	if (TokenGroup)
		HeapFree(GetProcessHeapEx(), HEAP_ZERO_MEMORY, TokenGroup);

	if (Sid)
		HeapFree(GetProcessHeapEx(), HEAP_ZERO_MEMORY, Sid);

	if (hAdvapi)
		FreeLibrary(hAdvapi);

	if (DisposeProcessHandle)
	{
		if (hToken)
			CloseHandle(hToken);
	}

	return (bFlag ? pSid : NULL);
}