KsepDsEventDevicePowerIrp
VOID __stdcall KsepDsEventDevicePowerIrp(
_DRIVER_OBJECT *DriverObject,
_DEVICE_OBJECT *Fdo,
_IRP *Irp,
UINT64 MinorCode,
_POWER_STATE_TYPE PowerType,
_DEVICE_POWER_STATE PowerState,
INT64 Status){
UINT64 v7;
UINT64 UserDataCount;
struct _EVENT_DATA_DESCRIPTOR UserData;
_DEVICE_OBJECT **v10;
int v11;
int v12;
_IRP **v13;
int v14;
int v15;
int *v16;
int v17;
int v18;
_POWER_STATE_TYPE *p_PowerType;
int v20;
int v21;
_DEVICE_POWER_STATE *p_PowerState;
int v23;
int v24;
INT64 *p_Status;
int v26;
int v27;
_DRIVER_OBJECT *v28;
_DEVICE_OBJECT *v29;
_IRP *v30;
int v31;
v31 = MinorCode;
v30 = Irp;
v29 = Fdo;
v28 = DriverObject;
v7 = *(_QWORD *)KseEtwHandle;
if( *(_QWORD *)KseEtwHandle )
{
if( EtwEventEnabled(
*(UINT64 *)KseEtwHandle,
(EVENT_DESCRIPTOR *)&KseDsEventDevicePowerIrp,
(EVENT_DESCRIPTOR *)Irp) )
{
UserData.Reserved = 0;
v12 = 0;
v15 = 0;
v18 = 0;
v21 = 0;
v24 = 0;
v27 = 0;
UserData.Ptr = (unsigned __int64)&v28;
v10 = &v29;
v13 = &v30;
v16 = &v31;
p_PowerType = &PowerType;
p_PowerState = &PowerState;
UserData.Size = 8;
v11 = 8;
v14 = 8;
p_Status = &Status;
LODWORD(UserDataCount) = 7;
v17 = 4;
v20 = 4;
v23 = 4;
v26 = 4;
EtwWriteEx(v7, (EVENT_DESCRIPTOR *)&KseDsEventDevicePowerIrp, 0i64, 0i64, 0i64, 0i64, UserDataCount, &UserData);
}
}
}Referenced by:
KseDsCallbackHookIrpPowerFunction