EtwpWriteAppStateChangeWithStats

void EtwpWriteAppStateChangeWithStats(){
  INT64 v0; 
  __int64 v1; 
  int v2; 
  UINT64 ProcessStartKey; 
  __int64 v4; 
  unsigned __int8 v5; 
  int v6; 
  __int64 v7; 
  __int64 v8; 
  char v9; 
  char v10; 
  char v11; 
  char v12; 
  int v13; 
  int v14; 
  int v15; 
  UINT64 v16; 
  __int64 v17; 
  struct _EVENT_DATA_DESCRIPTOR v18; 
  __int64 v19; 
  int v20; 
  int v21; 
  int *v22; 
  int v23; 
  int v24; 
  __int64 *v25; 
  int v26; 
  int v27; 
  int *v28; 
  int v29; 
  int v30; 
  char *v31; 
  int v32; 
  int v33; 
  char *v34; 
  int v35; 
  int v36; 
  char *v37; 
  int v38; 
  int v39; 
  char *v40; 
  int v41; 
  int v42; 
  __int64 v43; 
  int v44; 
  int v45; 
  int *v46; 
  int v47; 
  int v48; 
  __int64 *v49; 
  int v50; 
  int v51; 
  if( (unsigned int)dword_140C02B78 > 5 )
  {
    if( tlgKeywordOn((__int64)&dword_140C02B78, 0x200000000003i64) )
    {
      v2 = *(_DWORD *)(v0 + 1088);
      v21 = 0;
      v24 = 0;
      v13 = v2;
      v19 = v1;
      v22 = &v13;
      v20 = 98;
      v23 = 4;
      ProcessStartKey = PsGetProcessStartKey(v0);
      v5 = *(_BYTE *)(v4 + 2171);
      v27 = 0;
      v30 = 0;
      v33 = 0;
      v36 = 0;
      v39 = 0;
      v42 = 0;
      v45 = 0;
      v48 = 0;
      v16 = ProcessStartKey;
      v25 = (__int64 *)&v16;
      v14 = *(_DWORD *)(v4 + 2004);
      v28 = &v14;
      LOBYTE(ProcessStartKey) = (v6 - 3) & (*(_DWORD *)(v4 + 2172) >> 2);
      v26 = v6 + 4;
      v9 = ProcessStartKey;
      v31 = &v9;
      v32 = v6 - 3;
      v10 = v5 & 7;
      v34 = &v10;
      v11 = (v5 >> 3) & 7;
      v35 = v6 - 3;
      v37 = &v11;
      v40 = &v12;
      v15 = *(_DWORD *)(v4 + 1832);
      v46 = &v15;
      v7 = *(_QWORD *)(v4 + 2344);
      v51 = 0;
      v17 = v7 << 12;
      v49 = &v17;
      v38 = v6 - 3;
      v12 = (v6 - 3) & (v5 >> 6);
      v41 = v6 - 3;
      v50 = v6 + 4;
      v29 = v6;
      v43 = v8;
      v44 = 44;
      v47 = v6;
      tlgWriteTransfer_EtwWriteTransfer(
        (__int64)&dword_140C02B78,
        (unsigned __int8 *)&dword_14002C0E4,
        0i64,
        0i64,
        0xDu,
        &v18);
    }
  }
}

Referenced by: