EtwTraceInswapProcess

void __fastcall EtwTraceInswapProcess(__int64 a1){
  int v1; 
  UINT64 Flag; 
  unsigned __int64 v3; 
  int v4; 
  int v5; 
  EVENT_DATA_DESCRIPTOR v6; 
  v1 = *(_DWORD *)(a1 + 1088);
  v5 = 0;
  v4 = v1;
  LODWORD(Flag) = 5249282;
  v3 = *(_QWORD *)(a1 + 40) & 0xFFFFFFFFFFFFF000ui64;
  v6.Ptr = (unsigned __int64)&v3;
  v6.Reserved = 0;
  v6.Size = 12;
  EtwTraceKernelEvent(&v6, 1ui64, 0x20000800ui64, 0x323u, Flag);
}

Referenced by:

No references.