SepLocateTokenTrustLevel

VOID *__stdcall SepLocateTokenTrustLevel(_SECURITY_SUBJECT_CONTEXT *SubjectContext){
  VOID **ClientToken; 
  VOID **PrimaryToken; 
  UINT8 pbDominate; 

  ClientToken = (VOID **)SubjectContext->ClientToken;
  PrimaryToken = (VOID **)SubjectContext->PrimaryToken;
  pbDominate = 0;
  if( ClientToken )
  {
    RtlSidDominatesForTrust(PrimaryToken[138], ClientToken[138], &pbDominate);
    if( pbDominate )
      PrimaryToken = ClientToken;
  }
  return PrimaryToken[138];
}

Referenced by:

RtlpNewSecurityObject
RtlpSetSecurityObject
SeAccessCheckWithHintWithAdminlessChecks
SeAdjustAccessStateForAccessConstraints
SeShouldCheckForAccessRightsFromParent
SepAccessCheckAndAuditAlarmWithAdminlessChecks
SepAdjustAccessStateForConstraints
SepCommonAccessCheckExWithAdminlessChecks
SepGetDefaultsSubjectContext