SepSidFromProcessProtection

PVOID __fastcall SepSidFromProcessProtection(_BYTE *a1){
  void *v1; 
  v1 = 0i64;
  switch( *a1 )
  {
    case 0x12:
      return(PVOID)SeProcTrustAuthenticodeSid;
    case 0x31:
      return(PVOID)SeProcTrustLiteAntimalwareSid;
    case 0x51:
      return(PVOID)SeProcTrustLiteWinSid;
    case 0x52:
      return(PVOID)SeProcTrustWinSid;
    case 0x61:
      return(PVOID)SeProcTrustLiteWinTcbSid;
    case 0x62:
    case 0x72:
      return SeProcTrustWinTcbSid;
  }
  if( (unsigned __int8)*a1 == 129 )
    return(PVOID)SeProcTrustLiteAppSid;
  return v1;
}

Referenced by: