SeTokenIsNoChildProcessRestrictionEnforced

BOOL __stdcall SeTokenIsNoChildProcessRestrictionEnforced(PACCESS_TOKEN Token, PBOOLEAN UnlessSecure){
  _ETHREAD *CurrentThread; 
  int v4; 

  CurrentThread = (_ETHREAD *)KeGetCurrentThread();
  --CurrentThread->Tcb.KernelApcDisable;
  ExAcquireResourceSharedLite(*((_QWORD *)Token + 6), 1);
  v4 = *((_DWORD *)Token + 50);
  ExReleaseResourceLite(*((PERESOURCE *)Token + 6));
  KeLeaveCriticalRegionThread(KeGetCurrentThread());
  return(v4 & 0x80000) != 0;
}

Referenced by:

SeSubProcessToken