EtwTraceThreadWorkItem

VOID __stdcall EtwTraceThreadWorkItem(VOID *RoutineAddress, UINT16 HookId){
  int v3; 
  VOID *v4; 
  VOID **v5; 
  int v6; 
  int v7; 

  v4 = RoutineAddress;
  if( RoutineAddress != IopProcessWorkItem )
  {
    ExIsSafeWorkItem();
    if( !v3 )
    {
      v7 = 0;
      v5 = &v4;
      v6 = 8;
      EtwTraceKernelEvent((__int64)&v5, 1u, 0x48000000u, HookId, 0x11501902u);
    }
  }
}

Referenced by:

No references.