EtwTraceWorkingSetInSwapStoreFail

BOOLEAN __fastcall EtwTraceWorkingSetInSwapStoreFail(_EPROCESS *Process, int a2){
  UINT64 v2; 
  BOOLEAN result; 
  unsigned int ProcessId; 
  EVENT_DATA_DESCRIPTOR UserData; 
  int *v7; 
  int v8; 
  int v9; 
  int v10; 
  v10 = a2;
  v2 = EtwpMemoryProvRegHandle;
  result = EtwProviderEnabled(EtwpMemoryProvRegHandle, 0, 0x80ui64);
  if( result )
  {
    UserData.Reserved = 0;
    v9 = 0;
    ProcessId = (unsigned int)PsGetProcessId((PEPROCESS)Process);
    UserData.Size = 4;
    UserData.Ptr = (unsigned __int64)&ProcessId;
    v7 = &v10;
    v8 = 4;
    return EtwWrite(v2, (EVENT_DESCRIPTOR *)&KERNEL_MEM_EVENT_WS_INSWAP_STORE_FAIL, 0i64, 2ui64, &UserData);
  }
  return result;
}

Referenced by: