PspCopyUnicodeString

NTSTATUS __stdcall PspCopyUnicodeString(const VOID **SourceString, _UNICODE_STRING *DestString, VOID **BufferStart){
  VOID *v5; 

  *DestString = *(_UNICODE_STRING *)SourceString;
  if( SourceString[1] )
  {
    v5 = *BufferStart;
    DestString->Buffer = (wchar_t *)*BufferStart;
    memmove(v5, SourceString[1], *(unsigned __int16 *)SourceString);
    memset(
      (char *)*BufferStart + *(unsigned __int16 *)SourceString,
      0i64,
      *((unsigned __int16 *)SourceString + 1) - *(unsigned __int16 *)SourceString);
    if( *BufferStart )
      *BufferStart = (char *)*BufferStart + *((unsigned __int16 *)SourceString + 1);
  }
  return 0;
}

Referenced by:

PspCaptureUserProcessParameters