PpmEventHiddenProcessorBiosCapChange

CHAR __fastcall PpmEventHiddenProcessorBiosCapChange(UINT16 *a1, INT64 a2, EVENT_DESCRIPTOR *a3){
  void **v3; 
  UINT64 v5; 
  __int16 v6; 
  UINT64 UserDataCount; 
  __int16 v9; 
  EVENT_DATA_DESCRIPTOR UserData; 
  __int64 v11; 
  int v12; 
  int v13; 
  int *v14; 
  int v15; 
  int v16; 
  int *v17; 
  int v18; 
  int v19; 
  void *retaddr; 
  int v21; 
  int v22; 
  v3 = &retaddr;
  v22 = (int)a3;
  v21 = a2;
  if( PpmEtwRegistered )
  {
    v5 = PpmEtwHandle;
    LOBYTE(v3) = EtwEventEnabled(PpmEtwHandle, (EVENT_DESCRIPTOR *)&PPM_ETW_HIDDEN_PROCESSOR_BIOS_CAP_CHANGE, a3);
    if( (_BYTE)v3 )
    {
      v6 = *((unsigned __int8 *)a1 + 208);
      UserData.Reserved = 0;
      v13 = 0;
      v16 = 0;
      v19 = 0;
      v9 = v6;
      UserData.Ptr = (unsigned __int64)&v9;
      v11 = (__int64)a1 + 209;
      v14 = &v21;
      v17 = &v22;
      LODWORD(UserDataCount) = 4;
      v15 = 4;
      v18 = 4;
      UserData.Size = 2;
      v12 = 1;
      LOBYTE(v3) = EtwWriteEx(
                     v5,
                     (EVENT_DESCRIPTOR *)&PPM_ETW_HIDDEN_PROCESSOR_BIOS_CAP_CHANGE,
                     0i64,
                     0i64,
                     0i64,
                     0i64,
                     UserDataCount,
                     &UserData);
    }
  }
  return(char)v3;
}

Referenced by: