KsepDsEventPoolFree
VOID __stdcall KsepDsEventPoolFree(PVOID Address, PVOID Caller, UINT64 Tag){
UINT64 v3;
UINT64 UserDataCount;
EVENT_DATA_DESCRIPTOR UserData;
PVOID *v6;
int v7;
int v8;
int *v9;
int v10;
int v11;
PVOID v12;
PVOID v13;
int v14;
v14 = Tag;
v13 = Caller;
v12 = Address;
v3 = *(_QWORD *)KseEtwHandle;
if( *(_QWORD *)KseEtwHandle )
{
if( EtwEventEnabled(*(UINT64 *)KseEtwHandle, (EVENT_DESCRIPTOR *)&KseDsEventPoolFree, (EVENT_DESCRIPTOR *)Tag) )
{
UserData.Reserved = 0;
v8 = 0;
v11 = 0;
UserData.Ptr = (unsigned __int64)&v12;
UserData.Size = 8;
v6 = &v13;
v7 = 8;
v9 = &v14;
v10 = 4;
LODWORD(UserDataCount) = 3;
EtwWriteEx(v3, (EVENT_DESCRIPTOR *)&KseDsEventPoolFree, 0i64, 0i64, 0i64, 0i64, UserDataCount, &UserData);
}
}
}Referenced by:
KseDsHookExFreePool
KseDsHookExFreePoolWithTag