CmpLogHiveDestroyEvent

VOID __stdcall CmpLogHiveDestroyEvent(PCMHIVE Hive){
  wchar_t *Buffer; 
  wchar_t *v2; 
  unsigned int v3; 
  __int64 v4; 
  unsigned int v5; 
  int v6; 
  __int64 v7; 
  __int64 v8; 
  __int16 v9[8]; 
  PCMHIVE *v10; 
  __int64 v11[2]; 
  int Length; 
  int v13; 
  PCMHIVE v14; 

  v14 = Hive;
  v11[0] = 8i64;
  v9[0] = 0;
  Buffer = Hive->FileUserName.Buffer;
  v2 = Hive->HiveRootPath.Buffer;
  v10 = &v14;
  v3 = 1;
  if( Buffer )
  {
    v11[1] = (__int64)Buffer;
    v3 = 2;
    Length = Hive->FileUserName.Length;
    v13 = 0;
  }
  v4 = 2i64 * v3;
  v5 = v3 + 1;
  v11[v4 - 1] = (__int64)v9;
  v11[v4] = 2i64;
  if( v2 )
  {
    v6 = Hive->HiveRootPath.Length;
    v7 = 2i64 * v5++;
    v11[v7 - 1] = (__int64)v2;
    LODWORD(v11[v7]) = v6;
    HIDWORD(v11[v7]) = 0;
  }
  v8 = 2i64 * v5;
  v11[v8 - 1] = (__int64)v9;
  v11[v8] = 2i64;
  EtwTraceKernelEvent((__int64)&v10, v5 + 1, 0x41000000u, 0x925u, 0x501902u);
}

Referenced by: