EtwpTraceImageRundown

VOID __fastcall EtwpTraceImageRundown(INT64 *a1, INT16 a2, UINT16 *a3, INT64 a4, INT64 a5, CHAR a6, CHAR a7){
  int v7; 
  int v8; 
  __int64 v10; 
  UINT64 v11; 
  UINT64 v12; 
  UINT64 Flag; 
  UINT64 v14; 
  __int64 v15[2]; 
  int v16; 
  int v17; 
  int v18; 
  CHAR v19; 
  CHAR v20; 
  __int16 v21; 
  __int64 v22; 
  char v23[24]; 
  EVENT_DATA_DESCRIPTOR EventData; 
  __int64 v25; 
  int v26; 
  int v27; 
  __int64 *v28; 
  __int64 v29; 
  if( a3 )
  {
    v7 = a4;
    v8 = *a3;
    memset(v23, 0, sizeof(v23));
    if( (_WORD)v8 )
    {
      v10 = *((_QWORD *)a3 + 1);
      if( v10 )
      {
        v11 = *(unsigned int *)a1;
        v12 = a1[135];
        v16 = v7;
        v15[0] = *(_QWORD *)(a5 + 8);
        v15[1] = *(_QWORD *)(a5 + 24);
        v17 = *(_DWORD *)(a5 + 40);
        v19 = a6;
        v20 = a7;
        v22 = *(_QWORD *)(a5 + 16);
        EventData.Ptr = (unsigned __int64)v15;
        v26 = v8;
        LODWORD(v14) = 4200451;
        v28 = &EtwpNull;
        v18 = 0;
        v21 = 0;
        *(_OWORD *)v23 = 0i64;
        *(_QWORD *)&EventData.Size = 56i64;
        v25 = v10;
        v27 = 0;
        v29 = 2i64;
        LOWORD(Flag) = a2;
        EtwpLogKernelEvent(&EventData, v12, v11, 3u, Flag, v14);
      }
    }
  }
}

Referenced by: