PidNodeCompare

INT64 __fastcall PidNodeCompare(UINT64 *a1, INT64 a2){
  unsigned int v2; 
  unsigned int v3; 
  v2 = *(_DWORD *)a1;
  v3 = *(_DWORD *)(a2 + 24);
  if( v2 >= v3 )
    return v2 > v3;
  else
    return 0xFFFFFFFFi64;
}

Referenced by:

EtwpDemuxPrivateTraceHandle
EtwpGetPidDemuxList
EtwpRegisterPrivateSession