RtlpAllocDeallocQueryBuffer
NTSTATUS __stdcall RtlpAllocDeallocQueryBuffer(
UINT64 *PAllocLength,
PVOID OldKeyValueInformation,
INT64 *pStatus,
INT64 a4){
VOID *PoolWithTag;
int v5;
LODWORD(PoolWithTag) = 0;
v5 = 0;
if( OldKeyValueInformation )
ExFreePoolWithTag(OldKeyValueInformation, 0);
if( PAllocLength )
{
PoolWithTag = ExAllocatePoolWithTag(PagedPool, *PAllocLength, 0x76727152ui64);
if( !PoolWithTag )
v5 = -1073741801;
}
if( a4 )
*(_DWORD *)a4 = v5;
return(int)PoolWithTag;
}Referenced by:
RtlpQueryRegistryValues