SepSetTrustLevelForProcessToken
INT64 __fastcall SepSetTrustLevelForProcessToken(__int64 a1, __int64 a2, _BYTE *a3){
PVOID v5;
void *v6;
VOID *v7;
INT64 result;
char a1a;
a1a = *(_BYTE *)(a2 + 2170);
*a3 = 0;
v5 = SepSidFromProcessProtection(&a1a);
v6 = *(void **)(a1 + 1104);
v7 = v5;
if( v6 )
{
if( v5 && RtlEqualSid(v6, v5) )
return 0i64;
}
else if( !v5 )
{
return 0i64;
}
result = SepSetTokenTrust((_TOKEN *)a1, v7);
if( (int)result >= 0 )
*a3 = 1;
return result;
}Referenced by:
SeExchangePrimaryToken
SeSubProcessToken