EtwTraceTimeZoneInformationRefresh
CHAR __stdcall EtwTraceTimeZoneInformationRefresh(INT64 a1, INT64 a2, INT64 a3, CHAR a4, CHAR a5){
int v5;
CHAR result;
CHAR v7;
CHAR v8;
CHAR v9;
int v10;
__int64 v11;
_EVENT_DATA_DESCRIPTOR UserData;
int *v13;
__int64 v14;
int *v15;
__int64 v16;
CHAR *v17;
int v18;
int v19;
CHAR *v20;
int v21;
int v22;
_EVENT_DATA_DESCRIPTOR v23;
int *v24;
int v25;
int v26;
__int64 *v27;
int v28;
int v29;
CHAR *v30;
int v31;
int v32;
CHAR *v33;
int v34;
int v35;
CHAR *v36;
int v37;
int v38;
int v39;
int v40;
int v41;
CHAR v42;
v42 = a4;
v41 = a3;
v40 = a2;
v39 = a1;
v5 = a3 - 1;
if( v5 )
{
if( v5 == 1 )
result = 68;
else
result = 85;
}
else
{
result = 83;
}
if( *(&stru_140C00F40 + 1820) > 5u )
{
v26 = 0;
v29 = 0;
v32 = 0;
v35 = 0;
v38 = 0;
v7 = result;
v30 = &v7;
v33 = &v8;
v10 = a1;
v9 = a5;
v24 = &v10;
v36 = &v9;
LODWORD(v11) = a2;
v27 = &v11;
v8 = a4;
v25 = 4;
v28 = 4;
v31 = 1;
v34 = 1;
v37 = 1;
result = tlgWriteTransfer_EtwWriteTransfer(
(__int64)&stru_140C00F40 + 7280,
(unsigned __int8 *)word_14002B9E2,
0i64,
0i64,
7u,
&v23);
}
if( *(&ExBootDevicesRemovedEvent + 380) )
{
UserData.Reserved = 0;
v19 = 0;
v22 = 0;
UserData.Ptr = (unsigned __int64)&v39;
v13 = &v40;
v15 = &v41;
v17 = &v42;
v20 = &a5;
UserData.Size = 4;
v14 = 4i64;
v16 = 4i64;
v18 = 1;
v21 = 1;
return EtwWrite(*(&ExBootDevicesRemovedEvent + 380), &KernelTimeZoneInformationRefresh, 0, 5u, &UserData);
}
return result;
}Referenced by:
ExpRefreshTimeZoneInformation