PopTraceZoneCr3Mitigated

VOID __stdcall PopTraceZoneCr3Mitigated(UINT64 GenerationId, _POP_THERMAL_ZONE *ThermalZone){
  int v3; 
  _DEVICE_OBJECT *DeviceAttachmentBaseRefWithTag; 
  _DEVICE_OBJECT *v5; 
  void *DeviceNode; 
  __int64 v7; 
  const WCHAR *v8; 
  int v9; 
  int v10; 
  _EVENT_DATA_DESCRIPTOR v11; 
  int *v12; 
  int v13; 
  int v14; 
  int *v15; 
  int v16; 
  int v17; 
  char v18[16]; 

  v3 = GenerationId;
  DeviceAttachmentBaseRefWithTag = IoGetDeviceAttachmentBaseRefWithTag(
                                     *((_DEVICE_OBJECT **)ThermalZone + 6),
                                     0x67446F50ui64);
  v5 = DeviceAttachmentBaseRefWithTag;
  if( DeviceAttachmentBaseRefWithTag )
    DeviceNode = DeviceAttachmentBaseRefWithTag->DeviceObjectExtension->DeviceNode;
  else
    DeviceNode = 0i64;
  if( DeviceNode && *(&stru_140C00F40 + 1194) > 5u && tlgKeywordOn((__int64)&stru_140C00F40 + 4776, 0x400000000000i64) )
  {
    v14 = 0;
    v17 = 0;
    v12 = &v9;
    v10 = *((_DWORD *)ThermalZone + 32);
    v13 = 4;
    v16 = 4;
    v8 = *(const WCHAR **)(v7 + 136);
    v15 = &v10;
    v9 = v3;
    tlgCreate1Sz_wchar_t((__int64)v18, v8);
    tlgWriteTransfer_EtwWriteTransfer(
      (__int64)&stru_140C00F40 + 4776,
      (unsigned __int8 *)byte_1400272A1,
      0i64,
      0i64,
      5u,
      &v11);
  }
  if( v5 )
    ObfDereferenceObjectWithTag(v5, 0x67446F50ui64);
}

Referenced by:

PopCheckAndHandleThermalConditions
PopThermalZoneRemove