SeTokenGetNoChildProcessRestricted

VOID __stdcall SeTokenGetNoChildProcessRestricted(
        PACCESS_TOKEN Token,
        PBOOLEAN Enforced,
        PBOOLEAN UnlessSecure,
        PBOOLEAN AuditOnly){
  _ETHREAD *CurrentThread; 
  PBOOLEAN v7; 
  int v9; 
  CurrentThread = (_ETHREAD *)KeGetCurrentThread();
  v7 = Enforced;
  --*((_WORD *)CurrentThread + 242);
  LOBYTE(Enforced) = 1;
  ExAcquireResourceSharedLite(*((PERESOURCE *)Token + 6), (BOOL)Enforced);
  v9 = *((_DWORD *)Token + 50);
  ExReleaseResourceLite(*((PERESOURCE *)Token + 6));
  KeLeaveCriticalRegionThread((__int64)KeGetCurrentThread());
  *v7 = (v9 & 0x80000) != 0;
  *UnlessSecure = (v9 & 0x100000) != 0;
  *AuditOnly = (v9 & 0x200000) != 0;
}

Referenced by: