VOID __stdcall EtwTraceIoTimerEvent(UINT16 HookId, DEVICE_OBJECT *DeviceObject, PVOID RoutineAddress){
UINT64 Flag;
_QWORD v4[2];
EVENT_DATA_DESCRIPTOR v5;
v4[1] = RoutineAddress;
v5.Ptr = (unsigned __int64)v4;
v5.Reserved = 0;
v4[0] = DeviceObject;
v5.Size = 16;
LODWORD(Flag) = 5249026;
EtwTraceKernelEvent(&v5, 1ui64, 0x40800000ui64, HookId, Flag);
}