EtwpInitializeRealTimeConnection

INT64 __stdcall EtwpInitializeRealTimeConnection(){
  WCHAR v0; 
  struct _UNICODE_STRING DestinationString; 
  __int16 result; 
  char result_2; 
  int v5; 
  GENERIC_MAPPING v6; 
  int v7; 
  int v8; 
  int v9; 
  INT64(__fastcall *v10)(_OB_OPEN_REASON, CHAR, _EPROCESS *, VOID *, UINT64 *, UINT64); 
  VOID(__fastcall *v11)(_EPROCESS *, VOID *, UINT64, UINT64); 
  VOID(__stdcall *v12)(PVOID); 
  DestinationString = 0i64;
  memset((INT64)&result, 0i64);
  result_2 |= 0x18u;
  v10 = EtwpOpenRealTimeConnectionObject;
  result = 120;
  v11 = EtwpCloseRealTimeConnectionObject;
  v5 = 256;
  v12 = EtwpDeleteRealTimeConnectionObject;
  v6 = EtwpGenericMapping;
  v7 = 1024;
  v8 = 512;
  v9 = 160;
  RtlInitUnicodeString(&DestinationString, L"EtwConsumer", v0);
  return ObCreateObjectType(&DestinationString, (__int64)&result, 0i64, (__int64)&EtwpRealTimeConnectionObjectType);
}

Referenced by: