MiAllocatePool

NTSTATUS __fastcall MiAllocatePool(struct _SLIST_ENTRY *a1){
  UINT64 v1; 
  unsigned int v2; 
  int v3; 
  UINT64 v4; 
  unsigned int v5; 
  int v6; 
  INT64 v8; 
  char v9[4]; 
  POOL_TYPE PoolType[5]; 
  BYTE v11; 
  v3 = 0;
  v4 = v1;
  PoolType[0] = NonPagedPool;
  v5 = v2;
  v9[0] = 0;
  v11 = 0;
  v6 = *(unsigned __int16 *)(*((_QWORD *)KeGetCurrentPrcb() + 24) + 146i64);
  if( (int)ExpPoolFlagsToPoolType((INT64)a1, 1i64, (INT64 *)PoolType, (BYTE *)v9, &v11) < 0 )
    return 0;
  if( v11 )
    v3 = 1;
  if( v9[0] )
    return(unsigned int)ExAllocatePoolWithQuotaTag(PoolType[0], v4, v5);
  LODWORD(v8) = v3;
  return(unsigned int)ExpAllocatePoolWithTagFromNode((unsigned int)PoolType[0], v4, v5, v6 | 0x80000000, v8);
}

Referenced by: