PspSetNoChildProcessRestrictedPolicy

VOID __stdcall PspSetNoChildProcessRestrictedPolicy(_EPROCESS *a1, INT64 a2){
  int v2; 
  void *v4; 

  v2 = a2;
  v4 = PsReferencePrimaryToken(a1);
  SeTokenSetNoChildProcessRestricted(v4, v2 == 2, v2 == 3);
  ObFastDereferenceObject(&a1->Token, v4);
}

Referenced by:

NtSetInformationProcess
PspApplyMitigationOptions