MmNotifyProcessInSwapTrigger

char __fastcall MmNotifyProcessInSwapTrigger(__int64 a1){
  char result; 
  __int64 v2; 
  __int64 v3; 
  int v4; 
  __int64 v5; 
  __int64 v6; 
  int v7; 
  int v8; 
  int v9; 
  __int64 v10; 
  __int64 v11[4]; 
  char v12[16]; 
  int *v13; 
  int v14; 
  int v15; 
  __int64 *v16; 
  int v17; 
  int v18; 
  result = *(_BYTE *)(a1 + 1851) & 0x60;
  if( result == 64 && *(_QWORD *)&qword_140C4EC20 && **(_DWORD **)&qword_140C4EC20 > 5u )
  {
    result = tlgKeywordOn(*(__int64 *)&qword_140C4EC20, 0x400000000008i64);
    if( result )
    {
      tlgCreate1Sz_char((__int64)v12, (const CHAR *)(v2 + 1448));
      v4 = *(_DWORD *)(v3 + 1088);
      v15 = 0;
      v18 = 0;
      v13 = &v9;
      v16 = &v10;
      v9 = v4;
      v14 = 4;
      v10 = 0x1000000i64;
      v17 = 8;
      return tlgWriteEx_EtwWriteEx(v6, (unsigned __int8 *)&byte_1400249BF, v5, 1ui64, v7, v8, 5u, (__int64)v11);
    }
  }
  return result;
}

Referenced by: