EtwTraceKernelEvent

void __fastcall EtwTraceKernelEvent(__int64 a1, unsigned int a2, unsigned int a3, UINT16 a4, unsigned int a5){
  unsigned __int64 v6; 
  unsigned int v9; 
  bool i; 
  __int64 v11; 
  __int64 v12; 

  v6 = a3;
  v9 = *(_DWORD *)(EtwpHostSiloState + 4224);
  for( i = !_BitScanForward((unsigned int *)&v11, v9); !i; i = !_BitScanForward((unsigned int *)&v11, v9) )
  {
    v9 &= v9 - 1;
    v12 = 32i64 * (unsigned int)v11 + EtwpHostSiloState + 4260;
    if( v12 )
    {
      if( ((unsigned int)v6 & *(_DWORD *)(v12 + 4 * (v6 >> 29)) & 0x1FFFFFFF) != 0 )
        EtwpLogKernelEvent(
          a1,
          (_ETW_SILODRIVERSTATE *)EtwpHostSiloState,
          *(unsigned __int8 *)(EtwpHostSiloState + 2 * v11 + 4208),
          a2,
          a4,
          a5);
    }
  }
}

Referenced by:

CcCanIWrite
CcPerfLogExtraWBThreadAction
CcPerfLogFlushCache
CcPerfLogFlushSection
CcPerfLogLazyWriteScan
CcPerfLogScheduleReadAhead
CcPerfLogVolumeLogHandleInfo
CcPerfLogWorkItemEnqueue
CcPerformReadAhead
CcWorkerThread
CmpLogHiveDestroyEvent
CmpLogHiveInitializeEvent
CmpLogHiveLinkEvent
EtwTraceAntiStarvationBoost
EtwTraceDebuggerEvent
EtwTraceDequeueWork
EtwTraceDpcEnqueueEvent
EtwTraceEnqueueWork
EtwTraceFreezeThawProcess
EtwTraceIdealProcessor
EtwTraceInswapProcess
EtwTraceIoTimerEvent
EtwTraceJob
EtwTraceJobAssignProcess
EtwTraceJobRemoveProcess
EtwTraceJobSendNotification
EtwTraceJobSetQuery
EtwTracePriority
EtwTraceProcessTerminate
EtwTraceRetpolineExit
EtwTraceShouldYieldProcessor
EtwTraceThreadAffinity
EtwTraceThreadSetName
EtwTraceThreadWorkItem
EtwTraceWakeCounter
EtwTraceWakeEvent
EtwpEnumerateAddressSpace
EtwpLogMemInfo
EtwpLogMemInfoWsHelper
EtwpPmcInterrupt
EtwpSystemTraceWdf
EtwpTraceALPC
EtwpTraceDebugPrint
EtwpTraceFltIo
EtwpTraceImageUnload
EtwpTraceNetwork
EtwpTraceOpticalIo
EtwpTraceOpticalIoInit
EtwpTraceSplitIo
EtwpTraceWdf
IopPerfCompleteRequest
IopPerfCompletionRoutine
IopPerfLogCallEvent
IopPerfLogCallReturnEvent
KiCalibrateTimeAdjustment
KiTraceCancelTimer2
KiTraceSetTimer
KiTraceSetTimer2
MiCopyOnWrite
MiDeletePteRun
MiDemoteCombinedPte
MiLogAllocateWsleEvent
MiLogCombinedPteDelete
MiLogKernelStackEvent
MiLogMdlRangeEvent
MiLogNonPagedPoolReleaseEvent
MiLogPerfMemoryEvent
MiLogPerfMemoryRangeEvent
MiLogRemoveWsleEvent
MiLogSectionCreate
MiMakePageAvoidRead
MmLogQueryCombineStats
PerfInfoLogUnexpectedInterrupt
PerfLogExecutiveResourceInitialize
PerfLogExecutiveResourceRelease
PerfLogExecutiveResourceSetOwnerPointer
PerfLogExecutiveResourceWait
PerfLogImageLoad
PerfLogSpinLockRelease
PoBroadcastSystemState
PoSetUserPresent
PopDispatchStateCallout
PopExecutePowerAction
PopInvokeSystemStateHandler
PopLogNotifyDevice
PopPolicyWorkerAction
PopSystemIrpCompletion
PpmEventIdleStateChange
PpmEventLegacyProcessorPerfStateChange
PpmEventThermalCapChange
PpmTracePerfIdleRundown
VslpEnterIumSecureMode