RtlpAllocDeallocQueryBuffer

NTSTATUS __stdcall RtlpAllocDeallocQueryBuffer(
        UINT64 *PAllocLength,
        PVOID OldKeyValueInformation,
        INT64 *pStatus,
        INT64 a4){
  VOID *PoolWithTag; 
  int v5; 
  LODWORD(PoolWithTag) = 0;
  v5 = 0;
  if( OldKeyValueInformation )
    ExFreePoolWithTag(OldKeyValueInformation, 0);
  if( PAllocLength )
  {
    PoolWithTag = ExAllocatePoolWithTag(PagedPool, *PAllocLength, 0x76727152ui64);
    if( !PoolWithTag )
      v5 = -1073741801;
  }
  if( a4 )
    *(_DWORD *)a4 = v5;
  return(int)PoolWithTag;
}

Referenced by:

RtlpQueryRegistryValues