MiLogProcessWorkingSetsStop
VOID __stdcall MiLogProcessWorkingSetsStop(_MI_PARTITION *Partition){
ULONG v1;
__int64 v2;
__int64 v3;
_QWORD *v4;
__int64 v5;
int v6;
int v7;
__int64 v8;
__int64 v9;
__int64 v10;
__int64 v11[5];
int v12;
int v13;
__int64 *v14;
int v15;
int v16;
__int64 *v17;
int v18;
int v19;
if( *(&stru_140C4DB30 + 542) && **(&stru_140C4DB30 + 542) > 5u )
{
if( tlgKeywordOn(*(&stru_140C4DB30 + 542), 1i64) )
{
v5 = v4[888];
v13 = 0;
v16 = 0;
v19 = 0;
v8 = v5;
v11[4] = (__int64)&v8;
v9 = v4[936];
v14 = &v9;
v10 = v4[950];
v17 = &v10;
v12 = 8;
v15 = 8;
v18 = 8;
tlgWriteEx_EtwWriteEx(v3, (unsigned __int8 *)&unk_140024DC0, v2, v1, v6, v7, 5u, (__int64)v11);
}
}
}Referenced by:
MiProcessWorkingSets