SeTokenIsNoChildProcessRestrictionEnforced
BOOL __stdcall SeTokenIsNoChildProcessRestrictionEnforced(PACCESS_TOKEN Token, PBOOLEAN UnlessSecure){
_ETHREAD *CurrentThread;
int v4;
CurrentThread = (_ETHREAD *)KeGetCurrentThread();
--CurrentThread->Tcb.KernelApcDisable;
ExAcquireResourceSharedLite(*((_QWORD *)Token + 6), 1);
v4 = *((_DWORD *)Token + 50);
ExReleaseResourceLite(*((PERESOURCE *)Token + 6));
KeLeaveCriticalRegionThread(KeGetCurrentThread());
return(v4 & 0x80000) != 0;
}Referenced by:
SeSubProcessToken