SeQueryServerSiloToken

INT64 __stdcall SeQueryServerSiloToken(PVOID InToken, _EJOB **ServerSilo){
  _ETHREAD *CurrentThread; 
  _EJOB **v3; 
  unsigned int v5; 
  CurrentThread = (_ETHREAD *)KeGetCurrentThread();
  v3 = ServerSilo;
  --*((_WORD *)CurrentThread + 242);
  LOBYTE(ServerSilo) = 1;
  ExAcquireResourceSharedLite(*((PERESOURCE *)InToken + 6), (BOOL)ServerSilo);
  v5 = *((_DWORD *)InToken + 30);
  ExReleaseResourceLite(*((PERESOURCE *)InToken + 6));
  KeLeaveCriticalRegion();
  return PsGetSiloBySessionId(v5, v3);
}

Referenced by:

NtCreateUserProcess
SepCreateClientSecurityEx
SepUpdateSiloInClientSecurity