PipCreateEntry
CHAR *__fastcall PipCreateEntry(const VOID **a1){
CHAR *result;
CHAR *v3;
result = (CHAR *)ExAllocatePoolWithTag(PagedPool, *(unsigned __int16 *)a1 + 48i64, 0x6E697050ui64);
v3 = result;
if( result )
{
*(_OWORD *)result = 0i64;
*((_OWORD *)result + 1) = 0i64;
*((_OWORD *)result + 2) = 0i64;
*((_WORD *)result + 16) = *(_WORD *)a1;
*((_WORD *)result + 17) = *(_WORD *)a1;
*((_QWORD *)result + 5) = result + 48;
memmove((UINT8 *)result + 48, (UINT8 *)a1[1], *(unsigned __int16 *)a1);
return v3;
}
return result;
}Referenced by:
PipLookupGroupName