PsQuerySectionSignatureInformation

INT64 __stdcall PsQuerySectionSignatureInformation(_EPROCESS *Process, UINT8 *SignatureLevel){
  _SECTION *v2; 
  _CONTROL_AREA *v3; 
  _BYTE *v4; 
  if( Process != *((_EPROCESS **)KeGetCurrentThread() + 68) )
    return 3221225659i64;
  v2 = (_SECTION *)*((_QWORD *)Process + 163);
  if( !v2 )
    return 3221225473i64;
  v3 = MiSectionControlArea(v2);
  *v4 = *(_BYTE *)(*(_QWORD *)v3 + 15i64) >> 4;
  return 0i64;
}

Referenced by:

PsConvertToGuiThread