VrpProcessBufferParameter

NTSTATUS __stdcall VrpProcessBufferParameter(
        INT8 PreviousMode,
        VOID *SuspectBuffer,
        UINT64 SuspectBufferLength,
        VOID **BufferToUse){
  NTSTATUS v4; 
  VOID **PoolWithTag; 

  v4 = 0;
  PoolWithTag = 0i64;
  if( PreviousMode == 1 )
  {
    if( (_DWORD)SuspectBufferLength
      && (PoolWithTag = ExAllocatePoolWithTag(1ui64, (unsigned int)SuspectBufferLength, 1734693462i64)) == 0i64 )
    {
      return -1073741670;
    }
    else
    {
      *BufferToUse = PoolWithTag;
    }
  }
  else
  {
    *BufferToUse = SuspectBuffer;
  }
  return v4;
}

Referenced by:

VrpPostEnumerateKey
VrpPostQueryKey