EtwpEventWriteTemplateSessionEnd

VOID __stdcall EtwpEventWriteTemplateSessionEnd(
        _UNICODE_STRING *SessionName,
        _UNICODE_STRING *FileName,
        INT64 ErrorCode,
        UINT64 LoggingMode,
        UINT64 FailureReason,
        CHAR a6,
        CHAR a7,
        CHAR a8){
  _EVENT_DATA_DESCRIPTOR UserData; 
  __int64 *v9; 
  __int64 v10; 
  __int64 v11; 
  int v12; 
  int v13; 
  __int64 *v14; 
  __int64 v15; 
  CHAR *v16; 
  __int64 v17; 
  CHAR *v18; 
  __int64 v19; 
  CHAR *v20; 
  __int64 v21; 

  UserData.Ptr = *(_QWORD *)(LoggingMode + 8);
  UserData.Size = *(unsigned __int16 *)LoggingMode;
  v11 = *(_QWORD *)(FailureReason + 8);
  v12 = *(unsigned __int16 *)FailureReason;
  v16 = &a6;
  v18 = &a7;
  v20 = &a8;
  UserData.Reserved = 0;
  v9 = &EtwpNull;
  v13 = 0;
  v14 = &EtwpNull;
  v10 = 2i64;
  v15 = 2i64;
  v17 = 4i64;
  v19 = 4i64;
  v21 = 4i64;
  EtwWrite(*(&ExBootDevicesRemovedEvent + 241), &ETW_EVENT_SESSION_END_FAILED, 0, 7u, &UserData);
}

Referenced by: