PfSnTraceBufferAllocate

VOID **__stdcall PfSnTraceBufferAllocate(){
  VOID **result; 
  VOID **v1; 

  result = ExAllocatePoolWithTag(0x200ui64, 0x11000ui64, 1112564547i64);
  v1 = result;
  if( result )
  {
    memset(result, 0i64, 0x11000u);
    result = v1;
    *((_DWORD *)v1 + 5) = 4350;
  }
  return result;
}

Referenced by:

MiCompleteProtoPteFault
PfSnBeginTrace
PfSnTraceGetLogEntry