PpmEventCoreParkingStateChangeEx
CHAR __fastcall PpmEventCoreParkingStateChangeEx(INT64 a1, CHAR a2, EVENT_DESCRIPTOR *a3){
void **v3;
UINT64 v6;
UINT64 UserDataCount;
__int16 v9;
BOOL v10;
EVENT_DATA_DESCRIPTOR UserData;
__int16 *v12;
int v13;
int v14;
INT64 v15;
int v16;
int v17;
BOOL *v18;
int v19;
int v20;
void *retaddr;
v3 = &retaddr;
if( PpmEtwRegistered )
{
v6 = PpmEtwHandle;
LOBYTE(v3) = EtwEventEnabled(PpmEtwHandle, (EVENT_DESCRIPTOR *)&PPM_ETW_PARK_CORE, a3);
if( (_BYTE)v3 )
{
UserData.Reserved = 0;
v14 = 0;
v17 = 0;
UserData.Ptr = (unsigned __int64)&PpmCheckTime;
v9 = *(unsigned __int8 *)(a1 + 208);
v12 = &v9;
v15 = a1 + 209;
v19 = 4;
UserData.Size = 8;
v13 = 2;
v20 = 0;
v10 = a2 != 0;
v16 = 1;
v18 = &v10;
LODWORD(UserDataCount) = 4;
LOBYTE(v3) = EtwWriteEx(
v6,
(EVENT_DESCRIPTOR *)&PPM_ETW_PARK_CORE,
0i64,
0i64,
0i64,
0i64,
UserDataCount,
&UserData);
}
}
return(char)v3;
}Referenced by:
PpmParkReportParkedCore