EtwpIsEventNameFilterEnabled

BOOL __fastcall EtwpIsEventNameFilterEnabled(INT64 a1, UINT64 a2, UINT8 a3, INT64 a4, CHAR a5){
  BOOL result; 
  __int64 v6; 
  __int64 v7; 
  int v8; 
  __int64 v9; 
  UINT8 v10; 
  __int64 v11; 
  v6 = *(_QWORD *)(a1 + 384);
  if( !v6 )
    goto LABEL_2;
  v7 = 104i64 * (unsigned int)a2;
  v8 = *(_DWORD *)(v6 + v7);
  if( !a5 )
  {
    result = v8 & 0x80000400;
    if( result == -2147482624 )
    {
      v9 = *(_QWORD *)(v6 + v7 + 96);
      goto LABEL_8;
    }
LABEL_2:
    LOBYTE(result) = 0;
    return result;
  }
  result = v8 & 0x80002000;
  if( result != -2147475456 )
    goto LABEL_2;
  v9 = *(_QWORD *)(v7 + v6 + 56);
LABEL_8:
  if( !v9 )
    goto LABEL_2;
  v10 = *(_BYTE *)(v9 + 1);
  if( a3 > v10 )
  {
    if( v10 )
      goto LABEL_2;
  }
  if( a4 )
  {
    if( (a4 & *(_QWORD *)(v9 + 8)) == 0 )
      goto LABEL_2;
    v11 = *(_QWORD *)(v9 + 16);
    result = a4 & v11;
    if( (a4 & v11) != v11 )
      goto LABEL_2;
  }
  LOBYTE(result) = 1;
  return result;
}

Referenced by: