PsQuerySectionSignatureInformation

NTSTATUS __stdcall PsQuerySectionSignatureInformation(_EPROCESS *Process, UINT8 *SignatureLevel){
  _SECTION *SectionObject; 
  _CONTROL_AREA *v3; 
  _BYTE *v4; 

  if( Process != KeGetCurrentThread()->Process )
    return -1073741637;
  SectionObject = (_SECTION *)Process->SectionObject;
  if( !SectionObject )
    return -1073741823;
  v3 = MiSectionControlArea(SectionObject);
  *v4 = v3->Segment->SegmentFlags.UChar2 >> 4;
  return 0;
}

Referenced by:

PsConvertToGuiThread