EtwpGetProviderGroupFromTraits
_GUID *__stdcall EtwpGetProviderGroupFromTraits(VOID *Traits){
__int64 v1;
char *v2;
unsigned __int16 *v3;
UINT64 v4;
unsigned __int16 *v5;
v1 = *(unsigned __int16 *)Traits;
v2 = (char *)Traits + 2;
v3 = (unsigned __int16 *)((char *)Traits + v1);
v4 = strnlen((const CHAR *)Traits + 2, v1 - 3);
v5 = (unsigned __int16 *)(v2 + 1);
while( 1 )
{
v5 = (unsigned __int16 *)((char *)v5 + v4);
if( v5 >= v3 )
break;
v4 = *v5;
if( (_DWORD)v4 == 19 && *((_BYTE *)v5 + 2) == 1 )
return(_GUID *)((char *)v5 + 3);
}
return 0i64;
}Referenced by:
EtwpSetProviderTraitsCommon