PfTAccessTracingInitialize
VOID __fastcall PfTAccessTracingInitialize(INT64 a1, INT64 a2, INT64 a3){
EX_RUNDOWN_REF *v4;
if( !(_DWORD)a3 )
{
*(_QWORD *)(a1 + 16) = 0i64;
*(_DWORD *)(a1 + 12) = 3;
}
*(_DWORD *)(a2 + 40) = 0;
v4 = (EX_RUNDOWN_REF *)(a2 + 8);
if( (_DWORD)a3 )
{
_InterlockedExchange64((volatile __int64 *)v4, 0i64);
}
else
{
ExInitializePushLock(v4);
InitializeSListHead((_SLIST_HEADER *)(a2 + 64));
KeInitializeEvent((_KEVENT *)(a2 + 16), NotificationEvent, 0);
}
}Referenced by:
PfTAccessTracingCleanup
PfTInitialize