RtlpOpenThreadToken

INT64 __fastcall RtlpOpenThreadToken(UINT64 DesiredAccess, VOID **ThreadToken){
  unsigned int v3; 
  INT64 result; 
  v3 = DesiredAccess;
  LODWORD(result) = ZwOpenThreadTokenEx(
                      (PVOID)0xFFFFFFFFFFFFFFFEi64,
                      (unsigned int)DesiredAccess,
                      1u,
                      0x200ui64,
                      ThreadToken);
  if( (int)result < 0 )
    LODWORD(result) = ZwOpenThreadTokenEx((PVOID)0xFFFFFFFFFFFFFFFEi64, v3, 0, 0x200ui64, ThreadToken);
  return result;
}

Referenced by:

RtlAcquirePrivilege