BOOL CreateProtectedProcessAsUser()

in PPLGuard/exploit.cpp [1167:1186]