EtwpApplyStackWalkIdFilter

BOOL __stdcall EtwpApplyStackWalkIdFilter(INT16 a1, INT64 a2, UINT64 a3, CHAR a4){
  bool v4; 
  unsigned __int8 CurrentIrql; 
  _BYTE *v6; 
  unsigned __int8 v7; 
  _BYTE *v8; 
  unsigned __int8 v9; 

  v4 = 1;
  if( a4 )
  {
    CurrentIrql = KeGetCurrentIrql();
    __writecr8(2ui64);
    if( *(_QWORD *)(104i64 * (unsigned int)a3 + *(_QWORD *)(a2 + 384) + 48) )
    {
      EtwpPerfectHashFunctionSearch();
      v4 = *v6 == v7;
    }
    __writecr8(CurrentIrql);
  }
  else if( *(_QWORD *)(104i64 * (unsigned int)a3 + *(_QWORD *)(a2 + 384) + 48) )
  {
    EtwpPerfectHashFunctionSearch();
    return *v8 == v9;
  }
  return v4;
}

Referenced by: