EtwTraceSiloTimedEvent
VOID __fastcall EtwTraceSiloTimedEvent(
INT64 a1,
INT64 a2,
INT64 a3,
INT64 a4,
UINT64 *a5,
INT64 a6,
INT64 a7,
INT64 a8,
INT64 a9,
INT64 a10,
INT64 a11,
INT64 a12,
INT64 a13,
INT64 a14,
INT64 a15,
INT64 a16,
INT64 a17,
INT64 a18,
CHAR a19){
__int16 v19;
unsigned int v21;
__int64 v22;
_DWORD *v23;
__int64 v24;
bool v25;
unsigned int v26;
UINT64 v27;
unsigned int v28;
__int64 v29;
_DWORD *v30;
__int64 v31;
unsigned int v32;
UINT64 Flag;
UINT64 v34;
EVENT_DATA_DESCRIPTOR EventData;
INT64 v36;
int v37;
int v38;
v19 = a2;
v38 = 0;
v36 = a4;
v21 = *(_DWORD *)(EtwpHostSiloState + 4224);
v37 = 32;
while( 1 )
{
v25 = !_BitScanForward(&v26, v21);
if( v25 )
break;
v21 &= v21 - 1;
v22 = v26;
v23 = (_DWORD *)(32i64 * v26 + EtwpHostSiloState + 4260);
if( v23 && (*v23 & 0x2000) != 0 )
{
v24 = *(unsigned __int8 *)(EtwpHostSiloState + 2 * v22 + 4209);
EventData.Reserved = 0;
EventData.Size = 8;
LODWORD(v34) = 4200450;
LOWORD(Flag) = v19;
EventData.Ptr = a7 + 8 * (v24 - 1);
EtwpLogKernelEvent(
&EventData,
EtwpHostSiloState,
*(unsigned __int8 *)(EtwpHostSiloState + 2 * v22 + 4208),
2u,
Flag,
v34);
}
}
if( a1 )
{
v27 = *(_QWORD *)(*(_QWORD *)(a1 + 1272) + 864i64);
if( v27 )
{
v28 = *(_DWORD *)(v27 + 4224);
while( 1 )
{
v25 = !_BitScanForward(&v32, v28);
if( v25 )
break;
v29 = v32;
v28 &= v28 - 1;
v30 = (_DWORD *)(32i64 * v32 + v27 + 4260);
if( v30 )
{
if( (*v30 & 0x2000) != 0 )
{
v31 = *(unsigned __int8 *)(v27 + 2 * v29 + 4209);
EventData.Reserved = 0;
EventData.Size = 8;
LODWORD(v34) = 4200450;
LOWORD(Flag) = v19;
EventData.Ptr = a7 + 8 * (v31 - 1);
EtwpLogKernelEvent(&EventData, v27, *(unsigned __int8 *)(v27 + 2 * v29 + 4208), 2u, Flag, v34);
}
}
}
}
}
}Referenced by:
No references.