MiLogWsEmptyControl
VOID __stdcall MiLogWsEmptyControl(_MMSUPPORT_INSTANCE *VmSupport, UINT64 ControlFlags){
_DWORD *v2;
__int64 v3;
char v4;
ULONG v5;
int v6;
__int64 v7;
__int64 v8;
int v9;
int v10;
char v11;
char Key[12];
int v13;
__int64 v14[5];
int v15;
int v16;
INT64 v17[3];
ULONG v18;
int v19;
char *v20;
ULONG v21;
int v22;
memset(Key, 0, sizeof(Key));
if( *(&stru_140C4DB30 + 542) )
{
MiFillLogProcessInfo(VmSupport, (UINT64 *)Key, (INT8 **)&Key[4]);
if( *v2 > 5u )
{
if( tlgKeywordOn((__int64)v2, 16i64) )
{
v4 = *(_BYTE *)(v3 + 184) & 7;
v16 = 0;
v11 = v4;
v14[4] = (__int64)&v11;
v15 = 1;
tlgCreate1Sz_char((INT64)v17, *(const CHAR **)&Key[4]);
v19 = 0;
v22 = 0;
v17[2] = (INT64)&v13;
v13 = *(_DWORD *)Key;
v20 = &Key[4];
v18 = v5 + 3;
v21 = v5 + 3;
*(_DWORD *)&Key[4] = v6;
tlgWriteEx_EtwWriteEx(v8, (unsigned __int8 *)&byte_140025D39, v7, v5, v9, v10, 6u, (__int64)v14);
}
}
}
}Referenced by:
MmProcessWorkingSetControl