MiLogWsEmptyControl
VOID __fastcall MiLogWsEmptyControl(INT64 a1){
_DWORD *v1;
__int64 v2;
char v3;
UINT64 v4;
int v5;
__int64 v6;
__int64 v7;
int v8;
int v9;
char v10;
UINT Key;
CHAR *ImageFileName;
UINT v13;
__int64 v14[5];
int v15;
int v16;
char v17[16];
UINT *v18;
int v19;
int v20;
CHAR **p_ImageFileName;
int v22;
int v23;
ImageFileName = 0i64;
Key = 0;
if( *(_QWORD *)&qword_140C4EC20 )
{
MiFillLogProcessInfo((_MMSUPPORT_INSTANCE *)a1, &Key, &ImageFileName);
if( *v1 > 5u )
{
if( tlgKeywordOn((__int64)v1, 16i64) )
{
v3 = *(_BYTE *)(v2 + 184) & 7;
v16 = 0;
v10 = v3;
v14[4] = (__int64)&v10;
v15 = 1;
tlgCreate1Sz_char((__int64)v17, ImageFileName);
v20 = 0;
v23 = 0;
v18 = &v13;
v13 = Key;
p_ImageFileName = &ImageFileName;
v19 = v4 + 3;
v22 = v4 + 3;
LODWORD(ImageFileName) = v5;
tlgWriteEx_EtwWriteEx(v7, (unsigned __int8 *)&byte_140025D39, v6, v4, v8, v9, 6u, (__int64)v14);
}
}
}
}Referenced by:
MmProcessWorkingSetControl