EtwpCCSwapStop

VOID __stdcall EtwpCCSwapStop(UINT64 ClockType, UINT8 Stopping){
  unsigned int v2; 
  unsigned int v3; 
  __int64 i; 
  _BYTE *EtwSupport; 

  v2 = KeNumberProcessors_0;
  v3 = 0;
  for( i = (unsigned int)ClockType; v3 < v2; ++v3 )
  {
    EtwSupport = KeGetPrcb(v3)->EtwSupport;
    if( *(_QWORD *)&EtwSupport[8 * i + 296] )
      EtwSupport[i + 288] = 1;
  }
  if( Stopping )
    --CCSwapNumLoggersPerClockType[i];
}

Referenced by:

EtwpFlushTrace
EtwpUpdateGroupMasks