PspGetProcessProtectionRequirementsFromImage

NTSTATUS __stdcall PspGetProcessProtectionRequirementsFromImage(INT64 a1){
  _PS_PROTECTION v1; 
  unsigned __int8 *v2; 
  char v4; 
  char v5; 

  if( (MiSectionControlArea((_SECTION *)a1)->Segment->SegmentFlags.UChar2 & 0xF0) == 80 )
  {
    v4 = -127;
    if( v1.Level && v1.Level != 0x81 && RtlTestProtectedAccess(v1, (_PS_PROTECTION)-127) )
      v4 = v5;
    v1.Level = v4;
  }
  *v2 = v1.Level;
  return 0;
}

Referenced by:

NtCreateUserProcess
PspCreateProcess