PsSetExeModerationState

NTSTATUS __stdcall PsSetExeModerationState(INT64 a1, UINT64 a2, UINT64 a3){
  unsigned int v4; 
  unsigned int v5; 
  VOID *ExtensionTable; 
  NTSTATUS v7; 

  v4 = a3;
  v5 = a2;
  ExtensionTable = ExGetExtensionTable((_EX_HOST *)PspBamExtensionHost);
  if( !ExtensionTable )
    return -1073741822;
  v7 = (*((__int64(__fastcall **)(INT64, _QWORD, _QWORD))ExtensionTable + 3))(a1, v5, v4);
  ExReleaseRundownProtection(PspBamExtensionHost + 8);
  return v7;
}

Referenced by:

NtSetSystemInformation