ExpWnfPopulateStateDataRemoteCallback

NTSTATUS __stdcall ExpWnfPopulateStateDataRemoteCallback(
        INT64 a1,
        INT64 a2,
        INT64 a3,
        INT64 a4,
        VOID *Src,
        size_t Size){
  int v6; 
  int v8; 
  VOID **PoolWithTag; 
  VOID **v10; 

  v6 = a4;
  if( (_DWORD)a4 )
  {
    if( Size )
    {
      v8 = *(_DWORD *)(a2 + 56);
      PoolWithTag = ExAllocatePoolWithTag(1ui64, (unsigned int)(v8 + 16), 543583831i64);
      v10 = PoolWithTag;
      if( !PoolWithTag )
        return -1073741670;
      *(_DWORD *)PoolWithTag = 1050884;
      *((_DWORD *)PoolWithTag + 1) = v8;
      *((_DWORD *)PoolWithTag + 2) = Size;
      *((_DWORD *)PoolWithTag + 3) = v6;
      memmove(PoolWithTag + 2, Src, Size);
      *(_DWORD *)(a2 + 96) = *((_DWORD *)v10 + 3);
      *(_QWORD *)(a2 + 88) = v10;
    }
    else
    {
      *(_QWORD *)(a2 + 88) = 1i64;
      *(_DWORD *)(a2 + 96) = a4;
    }
  }
  return 0;
}

Referenced by: