EtwpWriteProcessorTrace

VOID __fastcall EtwpWriteProcessorTrace(INT64 *a1, INT64 a2, INT64 a3, INT64 a4){
  int v4; 
  unsigned int v5; 
  unsigned int *v6; 
  UINT64 Flag; 
  UINT64 v8; 
  EVENT_DATA_DESCRIPTOR v9; 
  INT64 v10; 
  int v11; 
  int v12; 
  v4 = *((_DWORD *)a1 + 12);
  v9.Ptr = (unsigned __int64)(a1 + 1);
  v9.Reserved = 0;
  v5 = v4 & 0xFFFFE600 | 2;
  *((_DWORD *)a1 + 9) = a4;
  *((_DWORD *)a1 + 12) = v5;
  *((_DWORD *)a1 + 8) = a3;
  v9.Size = 32;
  v10 = a2;
  v6 = (unsigned int *)*a1;
  v11 = a3;
  v12 = 0;
  LODWORD(v8) = v5;
  LOWORD(Flag) = 7968;
  EtwpLogKernelEvent(&v9, *((_QWORD *)v6 + 135), *v6, 2u, Flag, v8);
}

Referenced by: