CmpTraceHiveMountBaseFileMounted

VOID __stdcall CmpTraceHiveMountBaseFileMounted(PVOID FileHandle, INT64 a2){
  EVENT_DESCRIPTOR *v2; 
  __int16 v4; 
  struct _UNICODE_STRING UnicodeString; 
  EVENT_DESCRIPTOR EventDescriptor; 
  EVENT_DATA_DESCRIPTOR UserData; 
  __int16 *v8; 
  __int64 v9; 
  int *v10; 
  __int64 v11; 
  int v12; 
  v12 = a2;
  EventDescriptor = (EVENT_DESCRIPTOR)REGISTRY_PERF_EVENT_HIVE_MOUNT_BASE_FILE_MOUNTED;
  *(_DWORD *)(&UnicodeString.MaximumLength + 1) = 0;
  if( EtwEventEnabled(EtwpRegTraceHandle, &EventDescriptor, v2) )
  {
    UnicodeString.Buffer = 0i64;
    *(_DWORD *)&UnicodeString.Length = 0;
    if( CmpQueryNameString(FileHandle, &UnicodeString) >= 0 )
    {
      UserData.Ptr = (unsigned __int64)UnicodeString.Buffer;
      UserData.Size = UnicodeString.Length;
      v8 = &v4;
      v10 = &v12;
      UserData.Reserved = 0;
      v4 = 0;
      v9 = 2i64;
      v11 = 4i64;
      EtwWrite(EtwpRegTraceHandle, &EventDescriptor, 0i64, 3ui64, &UserData);
      RtlFreeAnsiString(&UnicodeString);
    }
  }
}

Referenced by: