PsSetExeModerationState

INT64 __fastcall PsSetExeModerationState(INT64 a1, UINT64 a2, UINT64 a3){
  unsigned int v4; 
  unsigned int v5; 
  UINT64 ExtensionTable; 
  unsigned int v7; 
  v4 = a3;
  v5 = a2;
  ExtensionTable = ExGetExtensionTable(PspBamExtensionHost);
  if( ExtensionTable )
  {
    v7 = (*(__int64(__fastcall **)(INT64, _QWORD, _QWORD))(ExtensionTable + 24))(a1, v5, v4);
    ExReleaseRundownProtection(PspBamExtensionHost + 8);
  }
  else
  {
    return(unsigned int)-1073741822;
  }
  return v7;
}

Referenced by:

NtSetSystemInformation