BOOL FindProcessTokenAndDuplicate()

in PPLGuard/exploit.cpp [828:939]