ExpWnfFindStateName

_QWORD *__fastcall ExpWnfFindStateName(INT64 a1, UINT64 a2){
  _QWORD *i; 
  for( i = *(_QWORD **)(a1 + 56); ; i = (_QWORD *)i[1] )
  {
    while( 1 )
    {
      if( !i )
        return 0i64;
      if( a2 >= i[3] )
        break;
      i = (_QWORD *)*i;
    }
    if( a2 <= i[3] )
      break;
  }
  return i - 2;
}

Referenced by:

ExpWnfCreateNameInstance
ExpWnfLookupNameInstance