SeQueryTokenTrustSid
NTSTATUS __stdcall SeQueryTokenTrustSid(PVOID Token){ return *((_QWORD *)Token + 138); }
Referenced by:
PsImpersonateClient