SmEtwLogStoreCorruption

VOID __stdcall SmEtwLogStoreCorruption(
        PVOID EtwRegHandle,
        UINT64 StoreId,
        PVOID VirtualAddress,
        UINT16 Size,
        PVOID CorruptionFlags){
  void *v6; 
  PHYSICAL_ADDRESS PhysicalAddress; 
  UINT64 v8; 
  UINT64 UserDataCount; 
  __int64 v10; 
  __int64 v11; 
  PHYSICAL_ADDRESS v12; 
  EVENT_DATA_DESCRIPTOR UserData; 
  __int64 *v14; 
  int v15; 
  int v16; 
  PHYSICAL_ADDRESS *v17; 
  int v18; 
  int v19; 
  PVOID *p_CorruptionFlags; 
  int v21; 
  int v22; 
  __int64 *v23; 
  int v24; 
  int v25; 
  __int64 v26; 
  int v27; 
  int v28; 
  __int64 v29; 
  int v30; 
  int v31; 
  PVOID v32; 
  __int64 *v33; 
  v32 = VirtualAddress;
  v6 = (void *)Size;
  v11 = Size;
  v10 = *v33;
  if( EtwEventEnabled(
         *(_QWORD *)EtwRegHandle,
         (EVENT_DESCRIPTOR *)StEventStoreCorruption,
         (EVENT_DESCRIPTOR *)VirtualAddress) )
  {
    UserData.Reserved = 0;
    v16 = 0;
    UserData.Ptr = (unsigned __int64)&v32;
    v14 = &v11;
    UserData.Size = 8;
    v15 = 8;
    PhysicalAddress = MmGetPhysicalAddress(v6);
    v19 = 0;
    v22 = 0;
    v25 = 0;
    v28 = 0;
    v31 = 0;
    v8 = *(_QWORD *)EtwRegHandle;
    v12 = PhysicalAddress;
    v17 = &v12;
    p_CorruptionFlags = &CorruptionFlags;
    v23 = &v10;
    v26 = (__int64)&v10 + 1;
    v29 = (__int64)&v10 + 4;
    LODWORD(UserDataCount) = 7;
    v18 = 8;
    v21 = 2;
    v24 = 1;
    v27 = 1;
    v30 = 4;
    EtwWriteEx(v8, (EVENT_DESCRIPTOR *)StEventStoreCorruption, 0i64, 1ui64, 0i64, 0i64, UserDataCount, &UserData);
  }
}

Referenced by: