PpmEventIdleStateChange

VOID __stdcall PpmEventIdleStateChange(UINT64 NewState, UINT64 OldState){
  UINT64 Flag; 
  int v3[2]; 
  __int64 v4; 
  EVENT_DATA_DESCRIPTOR EventData; 
  if( (xmmword_140CFB490 & 0x8000) != 0 )
  {
    v3[0] = NewState;
    v3[1] = OldState;
    EventData.Reserved = 0;
    EventData.Size = 16;
    LODWORD(Flag) = 1538;
    v4 = *((_QWORD *)KeGetCurrentPrcb() + 25);
    EventData.Ptr = (unsigned __int64)v3;
    EtwTraceKernelEvent(&EventData, 1ui64, 0x80008000ui64, 0x1235u, Flag);
  }
}

Referenced by: