EtwTraceProcessTerminate

void __fastcall EtwTraceProcessTerminate(__int64 a1){
  int v1; 
  UINT64 Flag; 
  int v3; 
  EVENT_DATA_DESCRIPTOR EventData; 
  v1 = *(_DWORD *)(a1 + 1088);
  EventData.Reserved = 0;
  v3 = v1;
  EventData.Size = 4;
  EventData.Ptr = (unsigned __int64)&v3;
  LODWORD(Flag) = 5249282;
  EtwTraceKernelEvent(&EventData, 1ui64, 1ui64, 0x30Bu, Flag);
}

Referenced by:

No references.