PnpEarlyLaunchImageNotificationPreProcess

NTSTATUS __fastcall PnpEarlyLaunchImageNotificationPreProcess(
        __int64 a1,
        __int64 a2,
        __int64 a3,
        __int64 a4,
        __int64 a5){
  *(_OWORD *)a3 = *(_OWORD *)a5;
  *(_OWORD *)(a3 + 16) = *(_OWORD *)(a5 + 16);
  *(_OWORD *)(a3 + 32) = *(_OWORD *)(a5 + 32);
  *(_OWORD *)(a3 + 48) = *(_OWORD *)(a5 + 48);
  *(_OWORD *)(a3 + 64) = *(_OWORD *)(a5 + 64);
  *(_OWORD *)(a3 + 80) = *(_OWORD *)(a5 + 80);
  *(_QWORD *)(a3 + 96) = *(_QWORD *)(a5 + 96);
  RtlDuplicateUnicodeString(0i64, (_UNICODE_STRING *)(a5 + 8), (_UNICODE_STRING *)(a3 + 8));
  RtlDuplicateUnicodeString(0i64, (_UNICODE_STRING *)(a5 + 24), (_UNICODE_STRING *)(a3 + 24));
  RtlDuplicateUnicodeString(0i64, (_UNICODE_STRING *)(a5 + 56), (_UNICODE_STRING *)(a3 + 56));
  RtlDuplicateUnicodeString(0i64, (_UNICODE_STRING *)(a5 + 40), (_UNICODE_STRING *)(a3 + 40));
  return PnpDiagnosticTraceObject(&KMPnPEvt_EarlyLaunch_LoadNotification_Start, (unsigned __int16 *)(a3 + 8));
}

Referenced by: