EtwpTraceLostEvent

VOID __stdcall EtwpTraceLostEvent(
        GUID *Guid,
        EVENT_DESCRIPTOR *EventDescriptor,
        UNICODE_STRING *SessionName,
        INT64 Status,
        UNICODE_STRING *SessionNamea,
        INT64 Statusa){
  __int64 v6; 
  UINT64 UserDataCount; 
  unsigned __int16 Id; 
  EVENT_DATA_DESCRIPTOR UserData; 
  int *v10; 
  __int64 v11; 
  unsigned __int16 *p_Id; 
  __int64 v13; 
  wchar_t *Buffer; 
  int Length; 
  int v16; 
  __int64 *v17; 
  __int64 v18; 
  int v19; 
  v19 = Status;
  v6 = *(_QWORD *)&Guid->Data1 - *(_QWORD *)&EventTracingProvGuid.Data1;
  if( *(_QWORD *)&Guid->Data1 == *(_QWORD *)&EventTracingProvGuid.Data1 )
    v6 = *(_QWORD *)Guid->Data4 - *(_QWORD *)EventTracingProvGuid.Data4;
  if( v6 )
  {
    Id = EventDescriptor->Id;
    UserData.Ptr = (unsigned __int64)Guid;
    *(_QWORD *)&UserData.Size = 16i64;
    v10 = &v19;
    v11 = 4i64;
    p_Id = &Id;
    v13 = 2i64;
    Buffer = SessionName->Buffer;
    Length = SessionName->Length;
    v16 = 0;
    v17 = &EtwpNull;
    v18 = 2i64;
    LODWORD(UserDataCount) = 5;
    EtwWriteEx(
      EtwpEventTracingProvRegHandle,
      (EVENT_DESCRIPTOR *)&ETW_EVENT_LOST_EVENT,
      0i64,
      1ui64,
      0i64,
      0i64,
      UserDataCount,
      &UserData);
  }
}

Referenced by: