SepSidFromProcessProtection

VOID *__stdcall SepSidFromProcessProtection(PS_PROTECTION *Protection){
  VOID *v1; 

  v1 = 0i64;
  switch( Protection->Level )
  {
    case 0x12u:
      return(VOID *)SeProcTrustAuthenticodeSid;
    case 0x31u:
      return(VOID *)SeProcTrustLiteAntimalwareSid;
    case 0x51u:
      return(VOID *)SeProcTrustLiteWinSid;
    case 0x52u:
      return(VOID *)SeProcTrustWinSid;
    case 0x61u:
      return(VOID *)SeProcTrustLiteWinTcbSid;
    case 0x62u:
    case 0x72u:
      return SeProcTrustWinTcbSid;
  }
  if( Protection->Level == 129 )
    return(VOID *)SeProcTrustLiteAppSid;
  return v1;
}

Referenced by:

SepReconcileTrustSidWithProcessProtection
SepReferenceTokenUsingPseudoHandle
SepSetTrustLevelForProcessToken