RtlIsParentOfChildAppContainer

UINT8 __fastcall RtlIsParentOfChildAppContainer(VOID *ParentAppContainerSid, VOID *ChildAppContainerSid){
  unsigned int v4; 
  UINT *v5; 
  int v7; 
  v7 = 0;
  if( (int)RtlGetAppContainerSidType(ParentAppContainerSid, &v7) >= 0
    && v7 == 2
    && (int)RtlGetAppContainerSidType(ChildAppContainerSid, &v7) >= 0
    && v7 == 1 )
  {
    v4 = 1;
    while( 1 )
    {
      v5 = RtlSubAuthoritySid(ParentAppContainerSid, v4);
      if( *v5 != *RtlSubAuthoritySid(ChildAppContainerSid, v4) )
        break;
      if( ++v4 >= 8 )
        return 1;
    }
  }
  return 0;
}

Referenced by:

SeTokenCanImpersonate
SepCheckCreateLowBox
SepIsParentOfChildAppContainer
SepSetTokenCapabilities
SepSetTokenPackage