SmProcessQueryStoreStats
INT64 __stdcall SmProcessQueryStoreStats(_EPROCESS *Process, UINT64 *StoreSizeInBytes, UINT64 *DataInStoreInBytes){
int StoreStats;
char *v7;
__int64 v8;
__int64 v9;
__int64 v10;
INT64 result;
unsigned int v13;
unsigned int v14;
char v15;
memset((INT64)&result, 0i64);
StoreStats = SmpProcessQueryStoreStats(Process, (INT64)&result);
if( StoreStats >= 0 )
{
if( StoreSizeInBytes )
{
*StoreSizeInBytes = 0i64;
v7 = &v15;
v8 = v13;
v9 = 8i64;
do
{
v10 = *(unsigned int *)v7;
v7 += 8;
*StoreSizeInBytes += v8 * v10;
--v9;
}
while( v9 );
}
if( DataInStoreInBytes )
*DataInStoreInBytes = (unsigned __int64)v14 << 12;
}
return(unsigned int)StoreStats;
}Referenced by:
EtwpLogMemInfoWs
PfpPrivSourceEnum