MiLogAllocateWsleEvent

VOID __fastcall MiLogAllocateWsleEvent(_MMPFN *Pfn1, _WORKING_SET_TYPE WorkingSetType, VOID *VirtualAddress){
  UNICODE_STRING *v6; 
  UINT8 v7; 
  PWCHAR v8; 
  int v9; 
  UINT16 v10; 
  unsigned int v11; 
  UINT64 Flag; 
  __int128 Identity; 
  __int128 Identity_16; 
  EVENT_DATA_DESCRIPTOR EventData; 
  Identity = 0i64;
  Identity_16 = 0i64;
  MiIdentifyPfnWrapper(Pfn1, (_MMPFN_IDENTITY *)&Identity);
  LOBYTE(v9) = MI_PFN_IS_PROTO((UNICODE_STRING *)Pfn1, v6, v7, v8);
  if( v9 )
  {
    MiFillPageExtraInfo((UINT64 *)&Identity_16 + 1, (unsigned int)WorkingSetType, (INT64)VirtualAddress);
    v10 = 642;
    v11 = 32;
  }
  else
  {
    v10 = 630;
    v11 = 24;
  }
  EventData.Reserved = 0;
  EventData.Ptr = (unsigned __int64)&Identity;
  EventData.Size = v11;
  LODWORD(Flag) = 289413890;
  EtwTraceKernelEvent(&EventData, 1ui64, 0x28000001ui64, v10, Flag);
}

Referenced by:

No references.