EtwpCovSampCaptureFlushStats

UINT64 __fastcall EtwpCovSampCaptureFlushStats(INT64 a1, _DWORD *a2){
  UINT64 result; 
  __int64 v5; 
  __int64 v6; 
  __int64 v7; 
  unsigned int v8; 
  __int64 v9; 
  __int64 v10; 
  __int64 v11; 
  _DWORD *v12; 
  result = KeQueryMaximumProcessorCountEx(0xFFFFu);
  if( (_DWORD)result )
  {
    v5 = 0i64;
    v6 = (unsigned int)result;
    do
    {
      v7 = ((unsigned int)*(_QWORD *)(a1 + 8) >> 13) & 0x3FFFF;
      _BitScanReverse(&v8, v7);
      v9 = 0i64;
      v10 = 8i64;
      v11 = *(_QWORD *)(*(_QWORD *)(*(_QWORD *)(v5 + ExSaPageArrays) + 8i64 * (v8 - 2))
                      + 8 * (v7 ^ (unsigned int)(1 << v8))
                      + 8)
          + 8 * ((*(_QWORD *)(a1 + 8) >> 4) & 0x1FFi64);
      v12 = a2;
      do
      {
        result = (unsigned int)_InterlockedExchange((volatile __int32 *)(v9 + v11 + 304), 0);
        *v12 += result;
        v9 += 4i64;
        ++v12;
        --v10;
      }
      while( v10 );
      v5 += 8i64;
      --v6;
    }
    while( v6 );
  }
  return result;
}

Referenced by:

EtwpCoverageSamplerQuery