_EX_RUNDOWN_REF *__fastcall PfSnLogHelper(_EPROCESS *a1, unsigned int a2, _QWORD *a3){
_EX_RUNDOWN_REF *v5;
_PFSN_TRACE_HEADER *v6;
_EX_RUNDOWN_REF *v7;
v5 = 0i64;
v6 = PfSnReferenceProcessTrace(a1);
v7 = (_EX_RUNDOWN_REF *)v6;
if( v6 )
{
if( (int)PfSnTraceGetLogEntry((__int64)v6, a2, a3) < 0 )
{
PfSnFailProcessTrace((INT64)v7);
}
else
{
v5 = v7;
v7 = 0i64;
}
if( v7 )
ExReleaseRundownProtection(v7 + 45);
}
return v5;
}