CmpLogClearAccessBitsEvent
VOID __stdcall CmpLogClearAccessBitsEvent(UNICODE_STRING *Hive, UINT64 KeysUpdated, UINT64 DirtyPages){
unsigned __int16 Length;
__int16 v4;
_EVENT_DATA_DESCRIPTOR UserData;
wchar_t *Buffer;
int v7;
int v8;
int *v9;
__int64 v10;
int *v11;
__int64 v12;
int v13;
int v14;
v14 = DirtyPages;
v13 = KeysUpdated;
if( *(&ExBootDevicesRemovedEvent + 380) )
{
Length = Hive->Length;
v7 = Hive->Length;
v4 = Length >> 1;
UserData.Ptr = (unsigned __int64)&v4;
Buffer = Hive->Buffer;
v9 = &v13;
v11 = &v14;
*(_QWORD *)&UserData.Size = 2i64;
v8 = 0;
v10 = 4i64;
v12 = 4i64;
EtwWrite(*(&ExBootDevicesRemovedEvent + 380), &HAL_ETW_EVENT_IOMMU_FAULT_INIT, 0, 4u, &UserData);
}
}Referenced by:
CmpClearKeyAccessBits