EtwpLogProcessPerfCtrs

VOID __stdcall EtwpLogProcessPerfCtrs(_EPROCESS *Process){
  __int64 v2; 
  INT64 v3; 
  INT64 v4; 
  PGET_UPDATED_BUS_RESOURCE v5; 
  int v6; 
  int v7; 
  __int64 v8[14]; 

  memset(v8, 0i64, 0x68u);
  LODWORD(v8[0]) = Process->UniqueProcessId;
  v8[2] = Process->PeakVirtualSize;
  v8[3] = Process->Vm.Instance.PeakWorkingSetSize << 12;
  v8[4] = Process->CommitChargePeak << 12;
  v8[5] = Process->ProcessQuotaPeak[1];
  v2 = Process->ProcessQuotaPeak[0];
  v7 = 0;
  v8[6] = v2;
  v6 = 104;
  v5 = (PGET_UPDATED_BUS_RESOURCE)v8;
  LODWORD(v3) = PsGetProcessServerSilo((INT64)Process);
  LODWORD(v4) = 5249026;
  EtwTraceSiloKernelEvent(v3, &v5, 1ui64, 1ui64, 800, v4);
}

Referenced by: