MiLogAllocateWsleEvent
VOID __fastcall MiLogAllocateWsleEvent(_MMPFN *Pfn1, _WORKING_SET_TYPE WorkingSetType, VOID *VirtualAddress){
UNICODE_STRING *v6;
UINT8 v7;
PWCHAR v8;
int v9;
UINT16 v10;
unsigned int v11;
UINT64 Flag;
__int128 Identity;
__int128 Identity_16;
EVENT_DATA_DESCRIPTOR EventData;
Identity = 0i64;
Identity_16 = 0i64;
MiIdentifyPfnWrapper(Pfn1, (_MMPFN_IDENTITY *)&Identity);
LOBYTE(v9) = MI_PFN_IS_PROTO((UNICODE_STRING *)Pfn1, v6, v7, v8);
if( v9 )
{
MiFillPageExtraInfo((UINT64 *)&Identity_16 + 1, (unsigned int)WorkingSetType, (INT64)VirtualAddress);
v10 = 642;
v11 = 32;
}
else
{
v10 = 630;
v11 = 24;
}
EventData.Reserved = 0;
EventData.Ptr = (unsigned __int64)&Identity;
EventData.Size = v11;
LODWORD(Flag) = 289413890;
EtwTraceKernelEvent(&EventData, 1ui64, 0x28000001ui64, v10, Flag);
}Referenced by:
No references.