INT64 __fastcall PfSnAddProcessTrace(INT64 a1, struct EX_RUNDOWN_REF *a2){
UINT8 v4;
unsigned int v5;
if( (*(_QWORD *)(a1 + 1536) & 0xFFFFFFFFFFFFFFF0ui64) != 0 )
{
return(unsigned int)-1073741791;
}
else
{
v4 = ExAcquireRundownProtectionEx(a2 + 45, 0x10ui64);
v5 = 0;
if( v4 )
*(_QWORD *)(a1 + 1536) = ((unsigned __int64)&a2[1].Ptr + 7) & -(__int64)(a2 != 0i64);
else
return(unsigned int)-1073741431;
}
return v5;
}