EtwTraceSiloTimedEvent

VOID __fastcall EtwTraceSiloTimedEvent(
        INT64 a1,
        INT64 a2,
        INT64 a3,
        INT64 a4,
        UINT64 *a5,
        INT64 a6,
        INT64 a7,
        INT64 a8,
        INT64 a9,
        INT64 a10,
        INT64 a11,
        INT64 a12,
        INT64 a13,
        INT64 a14,
        INT64 a15,
        INT64 a16,
        INT64 a17,
        INT64 a18,
        CHAR a19){
  __int16 v19; 
  unsigned int v21; 
  __int64 v22; 
  _DWORD *v23; 
  __int64 v24; 
  bool v25; 
  unsigned int v26; 
  UINT64 v27; 
  unsigned int v28; 
  __int64 v29; 
  _DWORD *v30; 
  __int64 v31; 
  unsigned int v32; 
  UINT64 Flag; 
  UINT64 v34; 
  EVENT_DATA_DESCRIPTOR EventData; 
  INT64 v36; 
  int v37; 
  int v38; 
  v19 = a2;
  v38 = 0;
  v36 = a4;
  v21 = *(_DWORD *)(EtwpHostSiloState + 4224);
  v37 = 32;
  while( 1 )
  {
    v25 = !_BitScanForward(&v26, v21);
    if( v25 )
      break;
    v21 &= v21 - 1;
    v22 = v26;
    v23 = (_DWORD *)(32i64 * v26 + EtwpHostSiloState + 4260);
    if( v23 && (*v23 & 0x2000) != 0 )
    {
      v24 = *(unsigned __int8 *)(EtwpHostSiloState + 2 * v22 + 4209);
      EventData.Reserved = 0;
      EventData.Size = 8;
      LODWORD(v34) = 4200450;
      LOWORD(Flag) = v19;
      EventData.Ptr = a7 + 8 * (v24 - 1);
      EtwpLogKernelEvent(
        &EventData,
        EtwpHostSiloState,
        *(unsigned __int8 *)(EtwpHostSiloState + 2 * v22 + 4208),
        2u,
        Flag,
        v34);
    }
  }
  if( a1 )
  {
    v27 = *(_QWORD *)(*(_QWORD *)(a1 + 1272) + 864i64);
    if( v27 )
    {
      v28 = *(_DWORD *)(v27 + 4224);
      while( 1 )
      {
        v25 = !_BitScanForward(&v32, v28);
        if( v25 )
          break;
        v29 = v32;
        v28 &= v28 - 1;
        v30 = (_DWORD *)(32i64 * v32 + v27 + 4260);
        if( v30 )
        {
          if( (*v30 & 0x2000) != 0 )
          {
            v31 = *(unsigned __int8 *)(v27 + 2 * v29 + 4209);
            EventData.Reserved = 0;
            EventData.Size = 8;
            LODWORD(v34) = 4200450;
            LOWORD(Flag) = v19;
            EventData.Ptr = a7 + 8 * (v31 - 1);
            EtwpLogKernelEvent(&EventData, v27, *(unsigned __int8 *)(v27 + 2 * v29 + 4208), 2u, Flag, v34);
          }
        }
      }
    }
  }
}

Referenced by:

No references.