ExpCaptureWnfStateName

NTSTATUS __stdcall ExpCaptureWnfStateName(
        const _WNF_STATE_NAME *StateName,
        _WNF_STATE_NAME_STRUCT *InternalStateName,
        CHAR ProbeMode){
  __int64 v3; 
  _WNF_STATE_NAME v4; 
  unsigned __int64 v5; 
  unsigned __int64 v6; 
  __int64 v7; 
  __int64 v8; 

  if( ProbeMode )
  {
    v3 = 0x7FFFFFFF0000i64;
    if( (unsigned __int64)StateName < 0x7FFFFFFF0000i64 )
      v3 = (__int64)StateName;
    v4 = *(_WNF_STATE_NAME *)v3;
  }
  else
  {
    v4 = *StateName;
  }
  v5 = *(_QWORD *)&v4 ^ 0x41C64E6DA3BC0074i64;
  InternalStateName->_bf_0 = v5;
  if( (v5 & 0xF) != 1 )
    return -1073741811;
  v6 = v5;
  v7 = (v5 >> 10) & 1;
  v8 = (v6 >> 6) & 0xF;
  if( (unsigned int)v8 > 5 || (_DWORD)v7 && (v8 & 0xFFFFFFF9) != 0 )
    return -1073741811;
  else
    return 0;
}

Referenced by: