EtwpGetTraceGroupList

__int64 __fastcall EtwpGetTraceGroupList(__int64 a1, _OWORD *a2, _DWORD *a3){
  int v3; 
  unsigned int v4; 
  unsigned int v5; 
  volatile INT64 *v8; 
  __int64 i; 
  volatile INT64 *NextGuidEntry; 
  v3 = 0;
  v4 = *a3 >> 4;
  v5 = 0;
  v8 = 0i64;
  for( i = a1; ; a1 = i )
  {
    NextGuidEntry = EtwpGetNextGuidEntry(a1, v8, 2i64);
    if( !NextGuidEntry )
      break;
    if( ++v5 > 0xFFFFFFF )
    {
      v3 = -2147483643;
      break;
    }
    if( v5 <= v4 )
      *a2++ = *(_OWORD *)(NextGuidEntry + 5);
    v8 = NextGuidEntry;
  }
  *a3 = 16 * v5;
  if( v3 >= 0 && v5 > v4 )
    return(unsigned int)-1073741789;
  return(unsigned int)v3;
}

Referenced by: