SeQueryTokenTrustSid

NTSTATUS __stdcall SeQueryTokenTrustSid(PVOID Token){
  return *((_QWORD *)Token + 138);
}

Referenced by:

PsImpersonateClient