PfSnLogHelper

_EX_RUNDOWN_REF *__fastcall PfSnLogHelper(_EPROCESS *a1, unsigned int a2, _QWORD *a3){
  _EX_RUNDOWN_REF *v5; 
  _PFSN_TRACE_HEADER *v6; 
  _EX_RUNDOWN_REF *v7; 

  v5 = 0i64;
  v6 = PfSnReferenceProcessTrace(a1);
  v7 = (_EX_RUNDOWN_REF *)v6;
  if( v6 )
  {
    if( (int)PfSnTraceGetLogEntry((__int64)v6, a2, a3) < 0 )
    {
      PfSnFailProcessTrace((INT64)v7);
    }
    else
    {
      v5 = v7;
      v7 = 0i64;
    }
    if( v7 )
      ExReleaseRundownProtection(v7 + 45);
  }
  return v5;
}

Referenced by:

PfSnLogStreamCreate
PfSnLogVolumeCreate