EtwpCrimsonStackWalkApc

INT64 __fastcall EtwpCrimsonStackWalkApc(void *a1, _QWORD *a2, _WORD *a3, _DWORD *a4, _DWORD *a5){
  UINT64 UserDataCount; 
  _LARGE_INTEGER v9; 
  _ETW_GUID_ENTRY result; 
  *a2 = 0i64;
  ExFreePoolWithTag(a1, 0);
  v9.LowPart = *a4;
  v9.HighPart = *a5;
  memset((INT64)&result, 0i64);
  LODWORD(UserDataCount) = 0;
  result.LastEnable.EnableFlags = v9;
  result.SiloState = (_ETW_SILODRIVERSTATE *)EtwpHostSiloState;
  result.EnableInfo[0].LoggerId = *a3;
  result.Guid = EventTracingProvGuid;
  result.EnableInfo[0].IsEnabled = 1;
  result.EnableInfo[0].EnableProperty = 68;
  result.EnableInfo[0].Level = -1;
  *(__m128i *)&result.EnableInfo[0].MatchAnyKeyword = _mm_load_si128((const __m128i *)&_xmm);
  return EtwpEventWriteFull(
           &result,
           1u,
           0i64,
           0i64,
           &ETW_EVENT_USER_STACK_TRACE,
           0,
           0,
           0i64,
           0i64,
           UserDataCount,
           0i64,
           0i64,
           0i64,
           0i64,
           0,
           0i64,
           0i64);
}

Referenced by: