PsSetExeModerationState
INT64 __fastcall PsSetExeModerationState(INT64 a1, UINT64 a2, UINT64 a3){
unsigned int v4;
unsigned int v5;
UINT64 ExtensionTable;
unsigned int v7;
v4 = a3;
v5 = a2;
ExtensionTable = ExGetExtensionTable(PspBamExtensionHost);
if( ExtensionTable )
{
v7 = (*(__int64(__fastcall **)(INT64, _QWORD, _QWORD))(ExtensionTable + 24))(a1, v5, v4);
ExReleaseRundownProtection(PspBamExtensionHost + 8);
}
else
{
return(unsigned int)-1073741822;
}
return v7;
}Referenced by:
NtSetSystemInformation