VmpLogAccessFault

VOID __stdcall VmpLogAccessFault(INT64 a1, INT64 a2, INT64 a3, INT64 a4, INT64 a5, INT64 a6, INT64 a7){
  __int64 v8; 
  __int64 v9; 
  __int64 v10; 
  __int64 v11; 
  __int64 v12; 
  int v13; 
  int v14; 
  int UniqueProcessId; 
  int v16; 
  int v17; 
  int v18; 
  INT64 v19; 
  __int64 v20; 
  __int64 v21; 
  __int64 v22[18]; 

  if( *(_DWORD *)VmpTraceLoggingProvider > 5u )
  {
    if( tlgKeywordOn(VmpTraceLoggingProvider, 8i64) )
    {
      UniqueProcessId = (int)KeGetCurrentThread()->ApcState.Process->UniqueProcessId;
      v22[4] = (__int64)&UniqueProcessId;
      v22[6] = (__int64)&v19;
      v22[8] = (__int64)&v20;
      v22[10] = (__int64)&v21;
      v16 = a5;
      v22[12] = (__int64)&v16;
      v17 = a6;
      v22[14] = (__int64)&v17;
      v18 = a7;
      v22[16] = (__int64)&v18;
      v22[7] = v8;
      v22[9] = v8;
      v21 = v10;
      v22[11] = v8;
      v22[5] = 4i64;
      v19 = a2;
      v20 = v12;
      v22[13] = 4i64;
      v22[15] = 4i64;
      v22[17] = 4i64;
      tlgWriteEx_EtwWriteEx(v11, (unsigned __int8 *)&byte_14002B507, v9, 0, v13, v14, 9u, (__int64)v22);
    }
  }
}

Referenced by: