PopTraceZoneCr3Mitigated
VOID __stdcall PopTraceZoneCr3Mitigated(UINT64 GenerationId, _POP_THERMAL_ZONE *ThermalZone){
int v3;
_DEVICE_OBJECT *DeviceAttachmentBaseRefWithTag;
_DEVICE_OBJECT *v5;
void *DeviceNode;
__int64 v7;
const WCHAR *v8;
int v9;
int v10;
_EVENT_DATA_DESCRIPTOR v11;
int *v12;
int v13;
int v14;
int *v15;
int v16;
int v17;
char v18[16];
v3 = GenerationId;
DeviceAttachmentBaseRefWithTag = IoGetDeviceAttachmentBaseRefWithTag(
*((_DEVICE_OBJECT **)ThermalZone + 6),
0x67446F50ui64);
v5 = DeviceAttachmentBaseRefWithTag;
if( DeviceAttachmentBaseRefWithTag )
DeviceNode = DeviceAttachmentBaseRefWithTag->DeviceObjectExtension->DeviceNode;
else
DeviceNode = 0i64;
if( DeviceNode && *(&stru_140C00F40 + 1194) > 5u && tlgKeywordOn((__int64)&stru_140C00F40 + 4776, 0x400000000000i64) )
{
v14 = 0;
v17 = 0;
v12 = &v9;
v10 = *((_DWORD *)ThermalZone + 32);
v13 = 4;
v16 = 4;
v8 = *(const WCHAR **)(v7 + 136);
v15 = &v10;
v9 = v3;
tlgCreate1Sz_wchar_t((__int64)v18, v8);
tlgWriteTransfer_EtwWriteTransfer(
(__int64)&stru_140C00F40 + 4776,
(unsigned __int8 *)byte_1400272A1,
0i64,
0i64,
5u,
&v11);
}
if( v5 )
ObfDereferenceObjectWithTag(v5, 0x67446F50ui64);
}Referenced by:
PopCheckAndHandleThermalConditions
PopThermalZoneRemove