SeTokenIsNoChildProcessRestrictionEnforced

BOOL __stdcall SeTokenIsNoChildProcessRestrictionEnforced(PACCESS_TOKEN Token, PBOOLEAN UnlessSecure){
  _ETHREAD *CurrentThread; 
  int v4; 
  _QWORD *v5; 
  CurrentThread = (_ETHREAD *)KeGetCurrentThread();
  --*((_WORD *)CurrentThread + 242);
  ExAcquireResourceSharedLite(*((PERESOURCE *)Token + 6), 1);
  v4 = *((_DWORD *)Token + 50);
  ExReleaseResourceLite(*((PERESOURCE *)Token + 6));
  v5 = KeLeaveCriticalRegionThread((__int64)KeGetCurrentThread());
  LOBYTE(v5) = (v4 & 0x80000) != 0;
  return(int)v5;
}

Referenced by: