VOID __stdcall EtwTimLogProhibitDynamicCode(INT64 a1, INT64 a2){
__int64 *v3;
if( (*(_DWORD *)(a2 + 2512) & 0x800) != 0 )
{
v3 = MITIGATION_AUDIT_PROHIBIT_DYNAMIC_CODE;
if( (_DWORD)a1 != 1 )
v3 = MITIGATION_ENFORCE_PROHIBIT_DYNAMIC_CODE;
EtwpTimLogMitigationForProcess(0, a1, (const _EVENT_DESCRIPTOR *)v3, (_EPROCESS *)a2);
_InterlockedAnd((volatile signed __int32 *)(a2 + 2512), 0xFFFFF7FF);
}
}