SmProcessQueryStoreStats

INT64 __stdcall SmProcessQueryStoreStats(_EPROCESS *Process, UINT64 *StoreSizeInBytes, UINT64 *DataInStoreInBytes){
  int StoreStats; 
  char *v7; 
  __int64 v8; 
  __int64 v9; 
  __int64 v10; 
  INT64 result; 
  unsigned int v13; 
  unsigned int v14; 
  char v15; 
  memset((INT64)&result, 0i64);
  StoreStats = SmpProcessQueryStoreStats(Process, (INT64)&result);
  if( StoreStats >= 0 )
  {
    if( StoreSizeInBytes )
    {
      *StoreSizeInBytes = 0i64;
      v7 = &v15;
      v8 = v13;
      v9 = 8i64;
      do
      {
        v10 = *(unsigned int *)v7;
        v7 += 8;
        *StoreSizeInBytes += v8 * v10;
        --v9;
      }
      while( v9 );
    }
    if( DataInStoreInBytes )
      *DataInStoreInBytes = (unsigned __int64)v14 << 12;
  }
  return(unsigned int)StoreStats;
}

Referenced by:

EtwpLogMemInfoWs
PfpPrivSourceEnum