MiLogOutswappedProcessCommitReacquire
VOID __stdcall MiLogOutswappedProcessCommitReacquire(
_EPROCESS *Process,
UINT64 CommitReleased,
UINT64 Fail,
UINT64 ProcessTerminating){
__int64 v5;
__int64 v6;
int v7;
__int64 v8;
__int64 v9;
unsigned __int8 *v10;
__int64 v11;
__int64 v12;
int v13;
int v14;
int v15;
int v16;
UINT64 v17;
__int64 v18[4];
char v19[16];
int *v20;
int v21;
int v22;
UINT64 *v23;
int v24;
int v25;
if( *(_QWORD *)&qword_140C4EC20 )
{
if( (_DWORD)Fail )
{
if( (_DWORD)ProcessTerminating )
{
if( **(_DWORD **)&qword_140C4EC20 > 5u && tlgKeywordOn(*(__int64 *)&qword_140C4EC20, 4i64) )
{
tlgCreate1Sz_char((__int64)v19, (const CHAR *)(v11 + 1448));
v10 = (unsigned __int8 *)byte_140024A13;
goto LABEL_13;
}
}
else if( **(_DWORD **)&qword_140C4EC20 > 5u && tlgKeywordOn(*(__int64 *)&qword_140C4EC20, 4i64) )
{
tlgCreate1Sz_char((__int64)v19, (const CHAR *)(v12 + 1448));
v10 = (unsigned __int8 *)&byte_140024A67;
goto LABEL_13;
}
}
else if( **(_DWORD **)&qword_140C4EC20 > 5u && tlgKeywordOn(*(__int64 *)&qword_140C4EC20, 4i64) )
{
tlgCreate1Sz_char((__int64)v19, (const CHAR *)(v5 + 1448));
v10 = (unsigned __int8 *)&word_140024B86;
LABEL_13:
v13 = *(_DWORD *)(v9 + 1088);
v22 = 0;
v25 = 0;
v20 = &v16;
v23 = &v17;
v21 = v7;
v16 = v13;
v17 = CommitReleased;
v24 = 8;
tlgWriteEx_EtwWriteEx(v8, v10, v6, 1u, v14, v15, 5u, (__int64)v18);
}
}
}Referenced by:
MiReAcquireOutSwappedProcessCommit