EtwpWriteAppStateChange

void EtwpWriteAppStateChange(){
  __int64 v0; 
  struct _EVENT_DATA_DESCRIPTOR v1; 
  __int64 v2; 
  int v3; 
  int v4; 
  if( (unsigned int)dword_140C02B78 > 5 )
  {
    if( tlgKeywordOn((__int64)&dword_140C02B78, 0x200000000001i64) )
    {
      v4 = 0;
      v2 = v0;
      v3 = 98;
      tlgWriteTransfer_EtwWriteTransfer(
        (__int64)&dword_140C02B78,
        (unsigned __int8 *)&unk_14002BB68,
        0i64,
        0i64,
        3u,
        &v1);
    }
  }
}

Referenced by:

EtwTraceAppStateChange
EtwTraceProcess