PspCopyUnicodeString
NTSTATUS __stdcall PspCopyUnicodeString(const VOID **SourceString, _UNICODE_STRING *DestString, VOID **BufferStart){
VOID *v5;
*DestString = *(_UNICODE_STRING *)SourceString;
if( SourceString[1] )
{
v5 = *BufferStart;
DestString->Buffer = (wchar_t *)*BufferStart;
memmove(v5, SourceString[1], *(unsigned __int16 *)SourceString);
memset(
(char *)*BufferStart + *(unsigned __int16 *)SourceString,
0i64,
*((unsigned __int16 *)SourceString + 1) - *(unsigned __int16 *)SourceString);
if( *BufferStart )
*BufferStart = (char *)*BufferStart + *((unsigned __int16 *)SourceString + 1);
}
return 0;
}Referenced by:
PspCaptureUserProcessParameters