EtwpTraceIoInit

VOID __stdcall EtwpTraceIoInit(_IRP *Irp){
  unsigned __int8 MajorFunction; 
  INT16 v3; 
  _ETHREAD *Thread; 
  INT64 v5; 
  int UniqueThread; 
  INT64 v7; 
  _IRP *v8; 
  int v9; 
  int v10; 
  PGET_UPDATED_BUS_RESOURCE v11; 
  int v12; 
  int v13; 

  v10 = 0;
  MajorFunction = Irp->Tail.CurrentStackLocation->MajorFunction;
  if( MajorFunction == 3 )
  {
    v3 = 268;
  }
  else
  {
    v3 = 271;
    if( MajorFunction != 9 )
      v3 = 269;
  }
  Thread = Irp->Tail.Thread;
  if( Thread )
  {
    LODWORD(v5) = PsGetThreadServerSilo((INT64)Irp->Tail.Thread);
    v8 = Irp;
    UniqueThread = (int)Thread->Cid.UniqueThread;
  }
  else
  {
    v5 = 0i64;
    v8 = Irp;
    UniqueThread = -1;
  }
  v13 = 0;
  v9 = UniqueThread;
  LODWORD(v7) = 22026499;
  v11 = (PGET_UPDATED_BUS_RESOURCE)&v8;
  v12 = 12;
  EtwTraceSiloKernelEvent(v5, &v11, 1ui64, 0x400ui64, v3, v7);
}

Referenced by: