PfLogFileDataAccess

INT64 __fastcall PfLogFileDataAccess(INT64 a1, INT64 a2, INT64 a3, INT64 a4, INT64 a5){
  __int64 v5; 
  unsigned __int64 v6; 
  __int64 v7; 
  __int64 v8; 
  __int64 v10; 
  __int64 v11; 
  __int64 v12[4]; 
  int v13; 
  int v14; 
  if( (unsigned int)PsGetPagePriorityThread(a2) < dword_140C4E56C )
    return 0i64;
  v10 = *(_QWORD *)(v5 + 544);
  v11 = *(_QWORD *)(v10 + 1088) ^ *(_QWORD *)(v10 + 1128);
  v12[2] = v7 & 0x7FFFFFFFFFFFFFFFi64 | ((__int64)(int)a5 << 63);
  v12[1] = v6 >> 12;
  v13 = dword_140CEBED0;
  v14 = *(_DWORD *)(v10 + 1088);
  v12[3] = v11 & 0x1FFFFFFFFFFFFFFFi64;
  v12[0] = v8;
  return PfLogEvent(
           10i64,
           dword_140C5001C
         + (unsigned int)((((KUSER_SHARED_DATA.TickCountMultiplier
                           * (unsigned __int64)KUSER_SHARED_DATA.ReservedTickCountOverlay[1]) << 8)
                         + ((KUSER_SHARED_DATA.TickCountMultiplier
                           * (unsigned __int64)KUSER_SHARED_DATA.TickCount.LowPart) >> 24)) >> 10),
           v12,
           0x28ui64);
}

Referenced by: