MiLogOutswappedProcessCommitReacquire
VOID __stdcall MiLogOutswappedProcessCommitReacquire(
_EPROCESS *Process,
UINT64 CommitReleased,
UINT64 Fail,
UINT64 ProcessTerminating){
__int64 v5;
__int64 v6;
int v7;
__int64 v8;
__int64 v9;
unsigned __int8 *v10;
__int64 v11;
__int64 v12;
int v13;
int v14;
int v15;
int v16;
UINT64 v17;
__int64 v18[4];
INT64 v19[3];
int v20;
int v21;
UINT64 *v22;
int v23;
int v24;
if( *(&stru_140C4DB30 + 542) )
{
if( (_DWORD)Fail )
{
if( (_DWORD)ProcessTerminating )
{
if( **(&stru_140C4DB30 + 542) > 5u && tlgKeywordOn(*(&stru_140C4DB30 + 542), 4i64) )
{
tlgCreate1Sz_char((INT64)v19, (const CHAR *)(v11 + 1448));
v10 = (unsigned __int8 *)byte_140024A13;
goto LABEL_13;
}
}
else if( **(&stru_140C4DB30 + 542) > 5u && tlgKeywordOn(*(&stru_140C4DB30 + 542), 4i64) )
{
tlgCreate1Sz_char((INT64)v19, (const CHAR *)(v12 + 1448));
v10 = (unsigned __int8 *)&byte_140024A67;
goto LABEL_13;
}
}
else if( **(&stru_140C4DB30 + 542) > 5u && tlgKeywordOn(*(&stru_140C4DB30 + 542), 4i64) )
{
tlgCreate1Sz_char((INT64)v19, (const CHAR *)(v5 + 1448));
v10 = (unsigned __int8 *)&word_140024B86;
LABEL_13:
v13 = *(_DWORD *)(v9 + 1088);
v21 = 0;
v24 = 0;
v19[2] = (INT64)&v16;
v22 = &v17;
v20 = v7;
v16 = v13;
v17 = CommitReleased;
v23 = 8;
tlgWriteEx_EtwWriteEx(v8, v10, v6, 1u, v14, v15, 5u, (__int64)v18);
}
}
}Referenced by:
MiReAcquireOutSwappedProcessCommit