EtwpEventWriteProviderEnabled

NTSTATUS __fastcall EtwpEventWriteProviderEnabled(
        __int64 a1,
        const _EVENT_DESCRIPTOR *a2,
        __int64 a3,
        unsigned __int16 *a4,
        unsigned __int64 a5,
        char a6,
        char a7,
        char a8,
        char a9){
  _EVENT_DATA_DESCRIPTOR UserData; 
  __int64 v11; 
  int v12; 
  int v13; 
  __int64 *v14; 
  __int64 v15; 
  char *v16; 
  __int64 v17; 
  char *v18; 
  __int64 v19; 
  char *v20; 
  __int64 v21; 
  char *v22; 
  __int64 v23; 

  UserData.Ptr = a5;
  v11 = *((_QWORD *)a4 + 1);
  v12 = *a4;
  v14 = &EtwpNull;
  v16 = &a6;
  v18 = &a7;
  v20 = &a8;
  v22 = &a9;
  *(_QWORD *)&UserData.Size = 16i64;
  v13 = 0;
  v15 = 2i64;
  v17 = 8i64;
  v19 = 8i64;
  v21 = 4i64;
  v23 = 1i64;
  return EtwWrite(*(&ExBootDevicesRemovedEvent + 241), a2, 0, 7u, &UserData);
}

Referenced by: