PerfInfoLogVirtualAlloc

VOID __stdcall PerfInfoLogVirtualAlloc(
        VOID *CapturedBase,
        UINT64 CapturedRegionSize,
        _EPROCESS *Process,
        UINT64 AllocationType){
  int UniqueProcessId; 
  INT64 v7; 
  INT64 v8; 
  INT64 v9; 
  INT64 v10; 
  __int128 v11; 
  __int64 v12[2]; 
  int v13; 
  int v14; 
  PGET_UPDATED_BUS_RESOURCE v15; 
  int v16; 
  int v17; 
  __int16 v18; 
  __int16 v19; 

  UniqueProcessId = (int)Process->UniqueProcessId;
  v17 = 0;
  v13 = UniqueProcessId;
  v12[0] = (__int64)CapturedBase;
  v15 = (PGET_UPDATED_BUS_RESOURCE)v12;
  v11 = 0i64;
  v12[1] = CapturedRegionSize;
  v14 = AllocationType;
  v16 = 24;
  LODWORD(v7) = PsGetProcessServerSilo((INT64)Process);
  LODWORD(v9) = 5249282;
  EtwTraceSiloKernelEvent(v7, &v15, 1ui64, 0x20008000ui64, 610, v9);
  if( v18 != v19 )
  {
    v17 = 0;
    WORD4(v11) = v19;
    *(_QWORD *)&v11 = CapturedBase;
    v15 = (PGET_UPDATED_BUS_RESOURCE)&v11;
    v16 = 16;
    LODWORD(v8) = PsGetProcessServerSilo((INT64)Process);
    LODWORD(v10) = 5249282;
    EtwTraceSiloKernelEvent(v8, &v15, 1ui64, 0x20008000ui64, 649, v10);
  }
}

Referenced by: