VrpProcessBufferParameter
NTSTATUS __stdcall VrpProcessBufferParameter(
INT8 PreviousMode,
VOID *SuspectBuffer,
UINT64 SuspectBufferLength,
VOID **BufferToUse){
NTSTATUS v4;
VOID **PoolWithTag;
v4 = 0;
PoolWithTag = 0i64;
if( PreviousMode == 1 )
{
if( (_DWORD)SuspectBufferLength
&& (PoolWithTag = ExAllocatePoolWithTag(1ui64, (unsigned int)SuspectBufferLength, 1734693462i64)) == 0i64 )
{
return -1073741670;
}
else
{
*BufferToUse = PoolWithTag;
}
}
else
{
*BufferToUse = SuspectBuffer;
}
return v4;
}Referenced by:
VrpPostEnumerateKey
VrpPostQueryKey