EtwpEventWriteTemplateBackingFile

VOID __stdcall EtwpEventWriteTemplateBackingFile(
        UNICODE_STRING *SessionName,
        UINT64 LoggingMode,
        EVENT_DESCRIPTOR *Descriptor){
  unsigned __int16 *v3; 
  int v4; 
  EVENT_DATA_DESCRIPTOR UserData; 
  __int64 *v6; 
  __int64 v7; 
  int *v8; 
  __int64 v9; 
  char *v10; 
  __int64 v11; 
  char v12; 
  UserData.Ptr = *((_QWORD *)v3 + 1);
  UserData.Size = *v3;
  v6 = &EtwpNull;
  v8 = &v4;
  UserData.Reserved = 0;
  v10 = &v12;
  v4 = -1073741432;
  v7 = 2i64;
  v9 = 4i64;
  v11 = 4i64;
  EtwWrite(EtwpEventTracingProvRegHandle, (EVENT_DESCRIPTOR *)&ETW_EVENT_BACKING_FILE_FULL, 0i64, 4ui64, &UserData);
}

Referenced by:

EtwpRealtimeRestoreState
EtwpRealtimeSaveBuffer