SepSidFromProcessProtection
VOID *__stdcall SepSidFromProcessProtection(PS_PROTECTION *Protection){
VOID *v1;
v1 = 0i64;
switch( Protection->Level )
{
case 0x12u:
return(VOID *)SeProcTrustAuthenticodeSid;
case 0x31u:
return(VOID *)SeProcTrustLiteAntimalwareSid;
case 0x51u:
return(VOID *)SeProcTrustLiteWinSid;
case 0x52u:
return(VOID *)SeProcTrustWinSid;
case 0x61u:
return(VOID *)SeProcTrustLiteWinTcbSid;
case 0x62u:
case 0x72u:
return SeProcTrustWinTcbSid;
}
if( Protection->Level == 129 )
return(VOID *)SeProcTrustLiteAppSid;
return v1;
}Referenced by:
SepReconcileTrustSidWithProcessProtection
SepReferenceTokenUsingPseudoHandle
SepSetTrustLevelForProcessToken