EtwpEventWriteTemplateMaxFileSize

VOID __stdcall EtwpEventWriteTemplateMaxFileSize(
        _UNICODE_STRING *SessionName,
        _UNICODE_STRING *FileName,
        UINT64 LoggingMode,
        UINT64 MaxFileSize,
        _GUID *Activity){
  int v5; 
  _EVENT_DATA_DESCRIPTOR UserData; 
  __int64 *v7; 
  __int64 v8; 
  __int64 v9; 
  int Data1_low; 
  int v11; 
  __int64 *v12; 
  __int64 v13; 
  int *v14; 
  __int64 v15; 
  char *v16; 
  __int64 v17; 
  char *v18; 
  __int64 v19; 
  char v20; 
  char v21; 

  UserData.Ptr = *(_QWORD *)(MaxFileSize + 8);
  UserData.Size = *(unsigned __int16 *)MaxFileSize;
  v9 = *(_QWORD *)Activity->Data4;
  Data1_low = LOWORD(Activity->Data1);
  v14 = &v5;
  v16 = &v20;
  v18 = &v21;
  UserData.Reserved = 0;
  v7 = &EtwpNull;
  v11 = 0;
  v12 = &EtwpNull;
  v5 = -1073741432;
  v8 = 2i64;
  v13 = 2i64;
  v15 = 4i64;
  v17 = 4i64;
  v19 = 8i64;
  EtwWrite(*(&ExBootDevicesRemovedEvent + 241), &ETW_EVENT_MAX_FILE_SIZE_REACHED, 0, 7u, &UserData);
}

Referenced by: